Dns Server

a_balcombe · 08-22-2005, 12:04 AM

I had DNS services running on LINUX version 9.0, however i did a /usr/sbin/rndc stop i am trying to restart the service now but i am getting an error "rndc: connect failed connection refused"

Is there any way i can restart

rhoekstra · 08-22-2005, 01:40 AM

RedHat 9.0? SuSe 9.0? Mandrake 9.0? There is no LINUX 9.0...

Anyway, this tells me that your dns server configuration (config file mostly /etc/named.conf) has no entry for rndc (remote named daemon control), so it doesn't listen on its control port.

Either bring that up, or you can try (as root) something as '/etc/init.d/named stop; /etc/init.d/named start', depending on how the start / stop script is called on the distro you are using.

If you are using your system graphically, there is most likely a system administration program like 'services' which lets you stop and start services on the machine.

Good luck.

cdhgee · 08-22-2005, 03:36 AM

As I understand it rndc only works when the server is already up and running to listen to rndc commands. If it's stopped, you'll have to restart it thus:

Code:

service named start

(Which incidentally is effectively the same as doing what rhoekstra suggested - although in Fedora at least (and so I guess also in RedHat 9), the service scripts are kept in a slightly different location, so you'd need to do

Code:

/etc/rc.d/init.d/named start

a_balcombe · 08-22-2005, 05:39 AM

Quote:

Originally posted by rhoekstra
RedHat 9.0? SuSe 9.0? Mandrake 9.0? There is no LINUX 9.0...

Anyway, this tells me that your dns server configuration (config file mostly /etc/named.conf) has no entry for rndc (remote named daemon control), so it doesn't listen on its control port.

Either bring that up, or you can try (as root) something as '/etc/init.d/named stop; /etc/init.d/named start', depending on how the start / stop script is called on the distro you are using.

If you are using your system graphically, there is most likely a system administration program like 'services' which lets you stop and start services on the machine.

Good luck.

Ok i stop the named service and started again, it said ok, however i am still getting the original erraor when i try to use the RNDC command, you mention about the dns server configuration file not having no entry for the RNDC what should it look like.

Thanks.

scowles · 08-22-2005, 07:19 AM

Type: man rndc-confgen

The -a command line argument should get you started in the right direction to solving your problem.

a_balcombe · 08-22-2005, 02:48 PM

I tried the RNDC-CONFGEN -A option but still i am getting the initial error messages with rndc, i must admit i am not too much an expert at linux.

rhoekstra · 08-23-2005, 01:24 AM

Is it necessary to use rndc?? Your initial question was how to restart the name server, if rndc wasn't working. We all responded with a solution.

But if you still incist you want rndc to work, here's the deal:
I assume you are using RedHat 9.0, as you haven't answered my initial question; no problem, but the locations and files could differ.

in /etc/rndc.conf you put

Code:

options {
        default-server  localhost;
        default-key     "rndckey";
};

server localhost {
        key     "rndckey";
};

include "rndc.key";

in rndc.key you put something like:

Code:

key "rndckey" {
        algorithm       hmac-md5;
        secret "5VwftiOHyTGHiN"; // BEWARE, this key is cripled, you'd have to create your own!
};

and in /etc/named.conf you should include something as:

Code:

controls {
  inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};

include "/etc/rndc.key";

This case your named server is told to listen to control commands from localhost, identified by the key from rndc.key. This key file is in turn used by rndc to encrypt his commands.

To create your own rndc key with rndc-confgen, and check if you have similar results in the config files as I have shown above..

Good luck.