[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: BIND 9 and OpenBSD 3.3



On Fri, May 02, 2003 at 03:09:31AM -0400, Reza Muhammad wrote:
> Hi all,
> I just upgraded my OpenBSD 3.2 to OpenBSD 3.3, and I'm one of the guy who's lost with BIND4 -> BIND9 migration.
> What I noticed now in /etc/rc.conf in OpenBSD 3.3, there's no more named_user="named" and named_chroot="/var/named". The process also only looks "named" instead of "named -u named -t /var/named". I also noticed some changes in /etc/rc concerning BIND. In OpenBSD 3.2, it looks like:

Privilege drop and chroot is the default now.

> 
> # $named_flags, $named_user, and $named_chroot are imported from /etc/rc.conf;
> # if $named_flags != NO, named is run.
> if [ "X${named_flags}" != X"NO" ]; then
>         if [ "X${named_user}" != "X" -a "X${named_user}" != X"root" ]; then
>                 named_flags="-u ${named_user} ${named_flags}"
>         fi
>         if [ "X${named_chroot}" != "X" ]; then
>                 named_flags="-t ${named_chroot} ${named_flags}"
>         fi
>         echo 'starting named';          named $named_flags
> fi
> 
> but in 3.3, it looks like:
> # if $named_flags != NO, named is run.
> if [ "X${named_flags}" != X"NO" ]; then
>         if ! cmp -s /etc/rndc.key /var/named/etc/rndc.key ; then
>                 echo -n "rndc-confgen: generating new shared secret... "
>                 if /usr/sbin/rndc-confgen -a -t /var/named >/dev/null 2>&1; then
>                         chmod 0640 /var/named/etc/rndc.key >/dev/null 2>&1
>                         echo done.
>                 else
>                         echo failed.
>                 fi
>         fi
> 
>         echo 'starting named';          named $named_flags
> fi
> 
> Should I change named_flags in rc.conf to be named_flags="-u named -t /var/named" ?

No.

> Thanks in advance for any help.
> sorry for the confusion
> 
> -- 
> Reza Muhammad.
> -----
> It's not what you know, It's what you can prove.
> thugwar_(_at_)_{ thugwar.net, gomed.org } 

-- 
   Alexander Yurchenko (aka grange)



Visit your host, monkey.org