On 06/26/2010 11:03 AM, Robert Nichols wrote:
On 06/25/2010 11:27 PM, Paolo Galtieri wrote:
> I just updated one of my Fedora 12 system. This particular system is
> running a local dns server. When I try to restart named on the system I
> get:
>
> Starting named:
> Error in named configuration:
> /etc/pki/dnssec-keys//named.dnssec.keys:1: open:
> /etc/pki/dnssec-keys//production/bg.conf: file not found
>
> rpm -qf /etc/pki/dnssec-keys/named.dnssec.keys
> file /etc/pki/dnssec-keys/named.dnssec.keys is not owned by any package
>
> yum provides /etc/pki/dnssec-keys//production/se.conf
> Loaded plugins: dellsysidplugin2, fastestmirror, refresh-packagekit
> Loading mirror speeds from cached hostfile
> * fedora:
mirror.stanford.edu
> * rpmfusion-free:
mirror.liberty.edu
> * rpmfusion-free-updates:
mirror.liberty.edu
> * rpmfusion-nonfree:
mirror.liberty.edu
> * rpmfusion-nonfree-updates:
mirror.liberty.edu
> * updates:
ftp.usf.edu
> No Matches found
>
> So what do I do to restore things to a working configuration?
In today's updates, bind-9.6.2-5.P2.fc12 fixes this problem and stops
bind from pulling in unbound as a dependency.
Unfortunately the fix therein only works while uninstalling dnssec-conf and
does nothing if that uninstall has already happened. The change that is
needed is to change the "include" lines in /etc/named.conf, deleting the
lines:
include "/etc/pki/dnssec-keys//named.dnssec.keys";
include "/etc/pki/dnssec-keys//dlv/dlv.isc.org.conf";
and inserting a single line:
include "/etc/named.iscdlv.key";
The commands that would do that can be seen by running:
rpm -q --triggers bind
If you like, you could just take the part of that output that
follows "triggerpostun scriptlet (using /bin/sh) -- dnssec-conf"
and feed it to /bin/sh to do the needed edits.
--
Bob Nichols "NOSPAM" is really part of my email address.
Do NOT delete it.