Red Hat LINUX 7.2 Reference Manual page 240

240
Figure 14–23 Sample options statement in /etc/rndc.conf
options {
default-server
default-key
};
Optionally, the rndc command can be told to use a default key when accessing a particular server, as
seen in Figure 14–24, Sample server statement in /etc/rndc.conf .
Figure 14–24 Sample server statement in /etc/rndc.conf
server localhost {
key
};
However, this server statement is only really helpful if you connect to multiple servers with rndc.
The key is the most important statement in /etc/rndc.conf.
Figure 14–25 Sample key statement in /etc/rndc.conf
key " <key-name> " {
algorithm hmac-md5;
secret " <key-value> ";
};
The <key-name> and <key-value> should be exactly the same as their settings in
/etc/named.conf.
To test all of the settings, try the rndc reload command. You should see response similar to this:
rndc: reload command successful
If the command was not successful, carefully go over the /etc/named.conf and
/etc/rndc.conf files and look for errors.
You should make sure that unprivileged users cannot read or write the
/etc/rndc.conf file.
14.3.2 Command Line Options
An rndc command takes the following form:
localhost;
" <key-name> ";
" <key-name> ";
Chapter 14:Berkeley Internet Name Domain (BIND)
CAUTION