#12649: BIND-9.14.5 rndc-confgen: The -r option has been deprecated.
-------------------------+-------------------------------------------------
 Reporter:  jacksparrow  |      Owner:  blfs-book
     Type:  defect       |     Status:  new
 Priority:  high         |  Milestone:  9.1
Component:  BOOK         |    Version:  SVN
 Severity:  major        |   Keywords:  9.0 bind-9.14.5 bind rndc-confgen
                         |  -r deprecated empty file key
-------------------------+-------------------------------------------------
 Setting up the rndc.conf file for Bind configuration errors out after
 pasting the following from the 9.0 BLFS book:


 {{{
 rndc-confgen -r /dev/urandom -b 512 > /etc/rndc.conf &&
 sed '/conf/d;/^#/!d;s:^# ::' /etc/rndc.conf > /srv/named/etc/named.conf
 }}}


      '''rndc-confgen: The -r option has been deprecated.'''

 Result:[[BR]]
 Empty initial rndc.conf file and subsequently empty named.conf.

 Change to:

 {{{
 rndc-confgen -a -b 512 -t /srv/named
 }}}

      '''wrote key file "/etc/rndc.key"[[BR]]
      wrote key file "/srv/named/etc/rndc.key"'''

 The -a option as per the man page:[[BR]]
 Do automatic rndc configuration. This creates a file rndc.key in /etc (or
 whatever sysconfdir was specified as when BIND was built) that is read by
 both rndc and named on startup. The rndc.key file defines a default
 command channel and authentication key allowing rndc to communicate with
 named on the local host with no further configuration.

 The -t option as per the man page:[[BR]]

 Used with the -a option to specify a directory where named will run
 chrooted. An additional copy of the rndc.key will be written relative to
 this directory so that it will be found by the chrooted named.

 Caveats:[[BR]]
 First time setting up this service on fresh 9.0 LFS system.
 Not tested at this time since machine is segregated from Internet,
 however, all indicators suggest it is working normally no error messages.

 Deviations from Book:[[BR]]
 Instead of
 {{{
 pip3 install ply
 }}}
 Ran from file:
 {{{
 wget http://www.dabeaz.com/ply/ply-3.11.tar.gz
 pip3 install ply-3.11.tar.gz
 }}}

      '''Processing ./ply-3.11.tar.gz
      Installing collected packages: ply
        Running setup.py install for ply ... done
      Successfully installed ply-3.11n'''

 Otherwise the Chapter was followed exactly.
 Seems to apply to both systemd or initv versions of book.[[BR]]

 Maybe missing some step? Cause it sure is odd that I'm finding this now
 and no one has used Bind up to now?
 Searched tickets and wiki nothing found.
 Maybe search mail lists?
 This is my first ticket. :)

--
Ticket URL: <http://wiki.linuxfromscratch.org/blfs/ticket/12649>
BLFS Trac <http://wiki.linuxfromscratch.org/blfs>
Beyond Linux From Scratch
-- 
http://lists.linuxfromscratch.org/listinfo/blfs-book
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to