Fix for ndc and rndc get key definition: not found errors

jumpdomain

Well-Known Member
Aug 12, 2001
109
0
316
CPanel does not setup the key statements correctly for ndc and rndc on Bind 9+ servers.

To fix this you will need to check and modify the following files:
/etc/named.conf
/etc/rndc.conf
/etc/rndc.key

In these files, it is setting the key to \"key\" and \"rndckey\". They should ALL be set to \"rndckey\" to work correctly. (Note: If all the key settings are pointing to \"key\" then that will work also... Just make sure that they all match, whatever you call them).

For example, the following files should look like this:

/etc/named.conf
=============================================================

key \"rndckey\" {
algorithm \"hmac-md5\";
secret \"secret_key_that_is_already_there\";
};


controls {
inet 127.0.0.1 allow { localhost; } keys { \"rndckey\"; };
};


/etc/rndc.conf
=============================================================

options {
default-server localhost;
default-key \"rndckey\";
};

server localhost {
key \"rndckey\";
};

key \"rndckey\" {
algorithm \"hmac-md5\";
secret \"secret_key_that_is_already_there;
};


/etc/rndc.key
=============================================================

key \"rndckey\" {
algorithm \"hmac-md5\";
secret \"secret_key_that_is_already_there\";
};

Hope this helps someone...

Jump Domain