rndc and nsupdate failing to work for me

Niall O'Reilly niall.oreilly at ucd.ie
Thu Mar 14 11:40:46 UTC 2019


On 14 Mar 2019, at 5:17, Marc Chamberlin via bind-users wrote:

> On 03/13/2019 08:33 PM, John W. Blue wrote:
>>
>> As an option, instead of including /etc/rndc.key nothing prevents you
>> from including rndc.conf.  That way you are consistent with your useage.

Another option is to include rndc.key from both rndc.conf and
named.conf, which also keeps things consistent.  Additionally, it
allows rndc.key to have stricter protection than the .conf files
(in my case, mode bits 0640 rather than 0644).

I seem to recall actually needing to do this because of named
objecting to the syntax of some of the configuration statements
I needed to use in rndc.conf.

I hope this helps.

Niall O'Reilly


More information about the bind-users mailing list