Re: bind9 logcheck

[gerhard <ggrubbish@web.de>]

Am Donnerstag 18 August 2005 00:49 schrieb gerhard:
> Am Mittwoch 17 August 2005 23:57 schrieb gerhard:
> > Ich frage mich weshalb bind9 überhaupt installiert ist, und wie ich
> > wohl Deine Vorschläge umsetzen kann.
>
> # apt-get -s remove bind9
> [...]
> The following packages will be REMOVED:
>   bind9 syscp
>
> # apt-cache show syscp
> [...]
> Description: System Control Panel
>  SysCP, the System Control Panel is a server
>  administration tool which enables an internet
>  service provider to give their customers a
>  web-based application to administrate their
>  email addresses, their suddomains etc.
>

Hallo,

Ich bin nochmals nach 
http://sysadmin.oreilly.com/news/dnsandbind_0401.html vorgegangen, und 
habe entsprechend die named.conf und rndc.conf angepasst (natürlich mit 
meinem key).

rndc.conf:

options {
       default-server localhost;
       default-key "rndc-key";
};

key "rndc-key" {
       algorithm hmac-md5;
       secret "jZhJ6D0KwJapRhr4Ln6RYQ==";
};

named.conf:

controls {
       inet * allow { any; } keys { "rndc-key"; };
};

key "rndc-key" {
       algorithm hmac-md5;
       secret "jZhJ6D0KwJapRhr4Ln6RYQ==";
};

Ohne Erfolg:

# /etc/init.d/bind9 restart
Stopping domain name service: namedrndc: connection to remote host 
closed
This may indicate that the remote server is using an older version of
the command protocol, this host is not authorized to connect,
or the key is invalid.
.
Starting domain name service: named.


Bleibt nur das:

# apt-get remove bind9
Reading Package Lists... Done
Building Dependency Tree... Done
The following packages will be REMOVED:
 bind9 syscp


Mal sehen, was ich davon habe ;-)

ciao

Gerhard