BIND9问题

Question

我的系统是REDHAT9
我在配完BIND后用rndc reload重新加载配置文件的时候老是报:
[root@linux etc]# rndc reconfig
rndc: no key definition for name rndckey
以下是我简化后的named.conf文件
// generated by named-bootconf.pl

options {
        directory "/var/named";
        /*
         * If there is a firewall between you and nameservers you want
         * to talk to, you might need to uncomment the query-source
         * directive below.  Previous versions of BIND always asked
         * questions using port 53, but BIND 8.1 uses an unprivileged
         * port by default.
         */
        // query-source address * port 53;
};

//
// a caching only nameserver config
//
controls {
        inet 127.0.0.1 allow { localhost; } keys { rndc-key; };
};

zone "mylinux.net" {
        type master;
        file "mylinux.net.hosts";
};

zone "0.168.192.in-addr.arpa" {
        type master;
        file "192.168.0.rev"
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "localhost" IN {
        type master;
        file "localhost.zone";
        allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "named.local";
        allow-update { none; };
};

key "rndc-key"{
      algorithm hmac-md5;
      secret "shared secret key goes here";
};

include "/etc/rndc.key";
请帮我看一下怎么回事，真的有点不理解，而且连named的进程都起不来了

Answer 1

这个需要先生成一段key，然后拷贝到/etc/rndc.key文件里面
检查你的/etc/rndc.key文件有没有内容

Answer 2

是用rndc confgen -a -b 256在/etc/rndc.key里生成一段MD5的密码吗？
还是用其它的命令生成啊？然后再考到哪里啊？
还有没有这方面的资料啊，谢谢了。