BIND-9.14.5 rndc-confgen: The -r option has been deprecated.
|Reported by:||Kevin||Owned by:||Douglas R. Reno|
|Severity:||major||Keywords:||9.0 bind-9.14.5 bind rndc-confgen -r deprecated empty file key|
Setting up the rndc.conf file for Bind configuration errors out after pasting the following from the 9.0 BLFS book:
rndc-confgen -r /dev/urandom -b 512 > /etc/rndc.conf && sed '/conf/d;/^#/!d;s:^# ::' /etc/rndc.conf > /srv/named/etc/named.conf
rndc-confgen: The -r option has been deprecated.
Empty initial rndc.conf file and subsequently empty named.conf.
rndc-confgen -a -b 512 -t /srv/named
wrote key file "/etc/rndc.key"
wrote key file "/srv/named/etc/rndc.key"
The -a option as per the man page:
Do automatic rndc configuration. This creates a file rndc.key in /etc (or whatever sysconfdir was specified as when BIND was built) that is read by both rndc and named on startup. The rndc.key file defines a default command channel and authentication key allowing rndc to communicate with named on the local host with no further configuration.
The -t option as per the man page:
Used with the -a option to specify a directory where named will run chrooted. An additional copy of the rndc.key will be written relative to this directory so that it will be found by the chrooted named.
First time setting up this service on fresh 9.0 LFS system. Not tested at this time since machine is segregated from Internet, however, all indicators suggest it is working normally no error messages.
Deviations from Book:
pip3 install ply
Ran from file:
wget http://www.dabeaz.com/ply/ply-3.11.tar.gz pip3 install ply-3.11.tar.gz
Processing ./ply-3.11.tar.gz Installing collected packages: ply
Running setup.py install for ply ... done
Successfully installed ply-3.11n
Otherwise the Chapter was followed exactly.
Seems to apply to both systemd or initv versions of book.
Maybe missing some step? Cause it sure is odd that I'm finding this now and no one has used Bind up to now? Searched tickets and wiki nothing found. Maybe search mail lists? This is my first ticket. :)