On Tue, 5 Jul 2011, Connie Sieh wrote:

> On Tue, 5 Jul 2011, Mike Peterson wrote:
>
>> The rpm files installed via yum via the command line for bind and bind-chroot
>> are
>> bind-9.7.3-2.el6_1.P1.1.i686
>> bind-chroot-9.7.3-2.el6_1.P1.1.i686
>> The command used to get the info you requested is rpm -qa | egrep bind
>
>>
>>
>> On Tue, 5 Jul 2011, Mike Peterson wrote:
>>
>>> After installing bind and bind-chroot and starting named the
>>> /var/log/messages
>>> complains that rndc.key is missing.
>>> If I run the rpm -ql bind | egrep rndc command it says that is should be
>>> part
>>> of
>>> the bind...rpm file but doing a yum remove and yum install of bind does not
>>> create the file.
>>>
>>> When I run rndc-confgen -a to create the files it never comes back with the
>>> #
>>> prompt without CTRL-C ing the program.
>>>
>>
>> What are the rpm version numbers of the bind and bind-chroot that you have
>> installed?
>>
>> -Connie Sieh
>>
>>>
>>>
>>>> Does DNS with bind on Scientific Linux work different than bind on RHEL and
>>>> CentOS?
>
> Still no.  So how are you comparing this to CentOS?
>
>>>
>>> No.
>>>
>>>>
>>>> If not, will bind be fixed with the release of Scientific Linux 6.1?
>
> Based on the research below TUV will have to fix this.
>
>>>>
>>>> I feel it is broken because files that are listed as being in the bind rpm
> A> are
>>>> missing on Scientific Linux 6.0.
>
> Note the /etc/rndc.key file is listest as %ghost in the bind.spec file. It is
> up the rpm to "build" it on the fly.
>
>
> In  bind-9.7.0... spec file
> ------------------------------------------------------------------------
> %post
> /sbin/ldconfig
> /sbin/chkconfig --add named
> if [ "$1" -eq 1 ]; then
>   if [ ! -e /etc/rndc.key ]; then
>     /usr/sbin/rndc-confgen -a > /dev/null 2>&1
>   fi
>   [ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.* /etc/named.*
>> /dev/null 2>&1 ;
>   # rndc.key has to have correct perms and ownership, CVE-2007-6283
>   [ -e /etc/rndc.key ] && chown root:named /etc/rndc.key
>   [ -e /etc/rndc.key ] && chmod 0640 /etc/rndc.key
> fi
> :;
>
> and in  bind-9.7.3... spec file
> ------------------------------------------------------------------------
> %post
> /sbin/ldconfig
> /sbin/chkconfig --add named
> if [ "$1" -eq 1 ]; then
>   [ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.* /etc/named.*
>> /dev/null 2>&1 ;
>   # rndc.key has to have correct perms and ownership, CVE-2007-6283
>   [ -e /etc/rndc.key ] && chown root:named /etc/rndc.key
>   [ -e /etc/rndc.key ] && chmod 0640 /etc/rndc.key
> fi
> :;
>
> ----------------------------------------------------------------------
> So you can see that the 9.7.3 versions do not do the
>
>     /usr/sbin/rndc-confgen -a > /dev/null 2>&1
>
> So thus no /etc/rndc.key file .
>
> -Connie Sieh
>

But the changelog for 9.7.3 states

   - don't generate rndc.key during installation

So maybe they intended it to be that way .

-Connie Sieh