On Wed, 31 Jul 2002, Gerhard van Niekerk wrote:
> I got some help from Måns Nilsson. The problem is that if i try rndc
> reload i get rndc: connect failed: connection refused now i got an doc
> from redhat
>
> http://www.redhat.com/docs/manuals/linux/RHL-7.2-Manual/ref-guide/s1-bind-rndc.html#BIND-RNDC-NAMED-CONTROLS
>
> they say do this dnssec-keygen -a hmac-md5 -b 256 -n HOST Mimer to get
> an key file when i do it i get Kmimer.+157+51178 where do i get the key
> or is Kmimer.+157+51178 the key name and where do i get it ?
Use a stronger key than 256 bits - 1024 or 2048 for example.
That command should generate two files:
Kmimer.+157+51178.key
Kmimer.+157+51178.private
Either should contain the same key (view it with 'cat' or your favourite
editor):
# cat Kmimer.+157+02543.key
Mimer. IN KEY 512 3 157 myshK32yPx7UxwdTMUsO91o3jEBHOoarVSH/0pEy1Eg=
# cat Kmimer.+157+02543.private
Private-key-format: v1.2
Algorithm: 157 (HMAC_MD5)
Key: myshK32yPx7UxwdTMUsO91o3jEBHOoarVSH/0pEy1Eg=
Now you can use that key in /etc/rndc.conf and /etc/named.conf, either
directly in the file itself, or indirectly by saving the key to a separate
file, and calling it from rndc.conf/named.conf with eg:
include "/etc/rndc.key"
or whatever you wish to call the file.
--
Juha Saarinen
|
