Package: bind9
Version: 1:9.7.3.dfsg-1
Severity: normal
Tags: patch
Hi,
I have a bind9 configuration using /etc/bind9/rndc.conf instead of the
bind8-style /etc/bind/rndc.key file.
Unfortunately, on every bind9 package update the postinst insists on
re-creating /etc/bind/rndc.key.
This makes rndc emit the warning
WARNING: key file (/etc/bind/rndc.key) exists, but using default
configuration file (/etc/bind/rndc.conf)
on every call.
Please consider making the creation of /etc/bind/rndc.key dependant
on the non-existence of /etc/bind/rndc.conf
The attached patch does exactly this.
I'd be grateful if you include this patch into Debian's bind9 postinst file.
Thanks for maintaining bind9 for Debian
Peter
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.38-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages bind9 depends on:
ii adduser 3.112+nmu2 add and remove users and groups
ii bind9utils 1:9.7.3.dfsg-1 Utilities for BIND
ii debconf [debconf-2.0] 1.5.38 Debian configuration management sy
ii libbind9-60 1:9.7.3.dfsg-1 BIND9 Shared Library used by BIND
ii libc6 2.11.2-11 Embedded GNU C Library: Shared lib
ii libcap2 1:2.20-1 support for getting/setting POSIX.
ii libcomerr2 1.41.12-2 common error description library
ii libdb4.6 4.6.21-17 Berkeley v4.6 Database Libraries [
ii libdns69 1:9.7.3.dfsg-1 DNS Shared Library used by BIND
ii libgssapi-krb5-2 1.8.3+dfsg-4 MIT Kerberos runtime libraries - k
ii libisc62 1:9.7.3.dfsg-1 ISC Shared Library used by BIND
ii libisccc60 1:9.7.3.dfsg-1 Command Channel Library used by BI
ii libisccfg62 1:9.7.3.dfsg-1 Config File Handling Library used
ii libk5crypto3 1.8.3+dfsg-4 MIT Kerberos runtime libraries - C
ii libkrb5-3 1.8.3+dfsg-4 MIT Kerberos runtime libraries
ii libldap-2.4-2 2.4.23-7pm1 OpenLDAP libraries
ii liblwres60 1:9.7.3.dfsg-1 Lightweight Resolver Library used
ii libssl0.9.8 0.9.8o-5 SSL shared libraries
ii libxml2 2.7.8.dfsg-2 GNOME XML library
ii lsb-base 3.2-27 Linux Standard Base 3.2 init scrip
ii net-tools 1.60-23 The NET-3 networking toolkit
ii netbase 4.45 Basic TCP/IP networking system
bind9 recommends no packages.
Versions of packages bind9 suggests:
ii bind9-doc 1:9.7.3.dfsg-1 Documentation for BIND
ii dnsutils 1:9.7.3.dfsg-1 Clients provided with BIND
pn resolvconf <none> (no description available)
pn ufw <none> (no description available)
-- debconf information:
bind9/different-configuration-file:
bind9/run-resolvconf: false
bind9/start-as-user: bind
--- bind9.postinst 2011-02-23 18:06:12.000000000 +0100
+++ bind9.postinst 2011-04-01 19:36:21.157973342 +0200
@@ -19,7 +19,7 @@
chmod 775 /var/lib/bind
fi
- if [ ! -s /etc/bind/rndc.key ]; then
+ if [ ! -s /etc/bind/rndc.key ] && [ ! -s /etc/bind/rndc.conf ]; then
rndc-confgen -r /dev/urandom -a
fi
