On Tue, 5 Jul 2011, Connie Sieh wrote:



> On Tue, 5 Jul 2011, Mike Peterson wrote:

>

>> The rpm files installed via yum via the command line for bind and bind-chroot

>> are

>> bind-9.7.3-2.el6_1.P1.1.i686

>> bind-chroot-9.7.3-2.el6_1.P1.1.i686

>> The command used to get the info you requested is rpm -qa | egrep bind

>

>>

>>

>> On Tue, 5 Jul 2011, Mike Peterson wrote:

>>

>>> After installing bind and bind-chroot and starting named the

>>> /var/log/messages

>>> complains that rndc.key is missing.

>>> If I run the rpm -ql bind | egrep rndc command it says that is should be

>>> part

>>> of

>>> the bind...rpm file but doing a yum remove and yum install of bind does not

>>> create the file.

>>>

>>> When I run rndc-confgen -a to create the files it never comes back with the

>>> #

>>> prompt without CTRL-C ing the program.

>>>

>>

>> What are the rpm version numbers of the bind and bind-chroot that you have

>> installed?

>>

>> -Connie Sieh

>>

>>>

>>>

>>>> Does DNS with bind on Scientific Linux work different than bind on RHEL and

>>>> CentOS?

>

> Still no.  So how are you comparing this to CentOS?

>

>>>

>>> No.

>>>

>>>>

>>>> If not, will bind be fixed with the release of Scientific Linux 6.1?

>

> Based on the research below TUV will have to fix this.

>

>>>>

>>>> I feel it is broken because files that are listed as being in the bind rpm

> A> are

>>>> missing on Scientific Linux 6.0.

>

> Note the /etc/rndc.key file is listest as %ghost in the bind.spec file. It is

> up the rpm to "build" it on the fly.

>

>

> In  bind-9.7.0... spec file

> ------------------------------------------------------------------------

> %post

> /sbin/ldconfig

> /sbin/chkconfig --add named

> if [ "$1" -eq 1 ]; then

>   if [ ! -e /etc/rndc.key ]; then

>     /usr/sbin/rndc-confgen -a > /dev/null 2>&1

>   fi

>   [ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.* /etc/named.*

>> /dev/null 2>&1 ;

>   # rndc.key has to have correct perms and ownership, CVE-2007-6283

>   [ -e /etc/rndc.key ] && chown root:named /etc/rndc.key

>   [ -e /etc/rndc.key ] && chmod 0640 /etc/rndc.key

> fi

> :;

>

> and in  bind-9.7.3... spec file

> ------------------------------------------------------------------------

> %post

> /sbin/ldconfig

> /sbin/chkconfig --add named

> if [ "$1" -eq 1 ]; then

>   [ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.* /etc/named.*

>> /dev/null 2>&1 ;

>   # rndc.key has to have correct perms and ownership, CVE-2007-6283

>   [ -e /etc/rndc.key ] && chown root:named /etc/rndc.key

>   [ -e /etc/rndc.key ] && chmod 0640 /etc/rndc.key

> fi

> :;

>

> ----------------------------------------------------------------------

> So you can see that the 9.7.3 versions do not do the

>

>     /usr/sbin/rndc-confgen -a > /dev/null 2>&1

>

> So thus no /etc/rndc.key file .

>

> -Connie Sieh

>



But the changelog for 9.7.3 states



   - don't generate rndc.key during installation



So maybe they intended it to be that way .



-Connie Sieh