id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
12649	BIND-9.14.5 rndc-confgen: The -r option has been deprecated.	Kevin	Douglas R. Reno	"Setting up the rndc.conf file for Bind configuration errors out after pasting the following from the 9.0 BLFS book:


{{{
rndc-confgen -r /dev/urandom -b 512 > /etc/rndc.conf &&
sed '/conf/d;/^#/!d;s:^# ::' /etc/rndc.conf > /srv/named/etc/named.conf
}}}


     '''rndc-confgen: The -r option has been deprecated.'''

Result:[[BR]]
Empty initial rndc.conf file and subsequently empty named.conf.

Change to:

{{{
rndc-confgen -a -b 512 -t /srv/named
}}}

     '''wrote key file ""/etc/rndc.key""[[BR]]
     wrote key file ""/srv/named/etc/rndc.key""'''

The -a option as per the man page:[[BR]]
Do automatic rndc configuration. This creates a file rndc.key in /etc (or whatever sysconfdir was specified as when BIND was built) that is read by both rndc and named on startup. The rndc.key file defines a default command channel and authentication key allowing rndc to communicate with named on the local host with no further configuration.

The -t option as per the man page:[[BR]]

Used with the -a option to specify a directory where named will run chrooted. An additional copy of the rndc.key will be written relative to this directory so that it will be found by the chrooted named.

Caveats:[[BR]]
First time setting up this service on fresh 9.0 LFS system.
Not tested at this time since machine is segregated from Internet, however, all indicators suggest it is working normally no error messages.

Deviations from Book:[[BR]]
Instead of 
{{{
pip3 install ply
}}}
Ran from file:
{{{
wget http://www.dabeaz.com/ply/ply-3.11.tar.gz
pip3 install ply-3.11.tar.gz
}}}
 
     '''Processing ./ply-3.11.tar.gz
     Installing collected packages: ply
       Running setup.py install for ply ... done
     Successfully installed ply-3.11n'''

Otherwise the Chapter was followed exactly.
Seems to apply to both systemd or initv versions of book.[[BR]]

Maybe missing some step? Cause it sure is odd that I'm finding this now and no one has used Bind up to now?
Searched tickets and wiki nothing found.
Maybe search mail lists?
This is my first ticket. :)"	defect	closed	high	9.1	BOOK	SVN	high	fixed	9.0 bind-9.14.5 bind rndc-confgen -r deprecated empty file key