IOhannes m zmölnig
unread,Sep 7, 2021, 3:50:04 AM9/7/21You do not have permission to delete messages in this group
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to
Package: bind9-utils
Version: 1:9.16.15-1
Severity: normal
Dear Maintainer,
After a recent upgrade from buster to bullseye, my rndc setup was
broken.
Running any `rndc` command that requires authentication, I get an error:
```
$ rndc thaw
rndc: connection to remote host closed
This may indicate that
* the remote server is using an older version of the command protocol,
* this host is not authorized to connect,
* the clocks are not synchronized,
* the key signing algorithm is incorrect, or
* the key is invalid.
$
```
After a bit of investigation, I found that the problem is, that up to
and including buster, `rndc` (and `bind9`) would honour an
`/etc/bind/rndc.key` file (out of the box), but since bullseye only the
`/etc/rndc.key` file is used.
From reading old bug reports (e.g. #179353), i gather that the
/etc/bind/key.rndc was a Debian specific modification, and i guess it
was eventually removed.
The transition is easy enough, however, i haven't found any trace of a
documentation hinting at that.
I would have expected a NEWS entry, or at least a mention in the
changelog.Debian.
cheerio & mfgtfa
IOhannes