12 Jan
2009
12 Jan
'09
2:51 p.m.
On Mon, 2009-01-12 at 15:16 +0100, Mogens Kjaer wrote:
Ralph Angenendt wrote: ...
Which really is strange, as only rndc.key gets "chowned" by the scripts in the bind package.
Maybe it's because I have bind-chroot installed?
The script calls:
/usr/sbin/bind-chroot-admin --enable > /dev/null 2>&1;
as part of postinstall, and /usr/sbin/bind-chroot-admin contains a lot of chown/chmod stuff.
---- I have seen that myself...
On the bind master zones, I now put them in /var/named/chroot/var/named/dynamic, chown the directory to named:named, chmod g+w (the 'dynamic' directory) and seem to be good.
I also now use the following to restart bind (because of journal files)...
rndc freeze && rndc flush && service named restart && rndc unfreeze
YMMV
Craig