BIND9问题，急！

发布于 2022-10-02 13:23:35 字数 8771 浏览 17 评论 0

[b]我配了BIND后其它认[/b]为没什么关系了就是rndc老是有问题，所以named进程一直起不来。
我试了一些命令但结果都不行，请帮我看看。
[root@linux named]# rndc reload
rndc: connect failed: connection refused

[root@linux named]# service named restart
停止 named：rndc: connection to remote host closed
This may indicate that the remote server is using an older version of
the command protocol, this host is not authorized to connect,
or the key is invalid.
[ 确定 ]

[root@linux named]# named -g
Oct 21 11:39:47.316 starting BIND 9.2.1 -g
Oct 21 11:39:47.317 using 2 CPUs
Oct 21 11:39:47.320 loading configuration from '/etc/named.conf'
Oct 21 11:39:47.332 no IPv6 interfaces found
Oct 21 11:39:47.332 listening on IPv4 interface lo, 127.0.0.1#53
Oct 21 11:39:47.332 binding TCP socket: address in use
Oct 21 11:39:47.333 listening on IPv4 interface eth0, 192.168.0.111#53
Oct 21 11:39:47.333 binding TCP socket: address in use
Oct 21 11:39:47.333 listening on IPv4 interface eth1, 192.168.0.222#53
Oct 21 11:39:47.333 binding TCP socket: address in use
Oct 21 11:39:47.336 /etc/named.conf:23: couldn't find key ' rnd-ckey' for use with command channel 127.0.0.1#953
Oct 21 11:39:47.336 /etc/named.conf:23: couldn't add command channel 127.0.0.1#953: address in use
Oct 21 11:39:47.336 ignoring config file logging statement due to -g option
Oct 21 11:39:47.336 couldn't open pid file '/var/run/named/named.pid': File exists
Oct 21 11:39:47.336 exiting (due to early fatal error)

请问是什么问题，以下是我的named.conf和rndc.conf和rndc.key
named.conf:
// generated by named-bootconf.pl

options {
      directory "/var/named";
      /*
      * If there is a firewall between you and nameservers you want
      * to talk to, you might need to uncomment the query-source
      * directive below.  Previous versions of BIND always asked
      * questions using port 53, but BIND 8.1 uses an unprivileged
      * port by default.
      */
      // query-source address * port 53;
};

//
// a caching only nameserver config
//
key "rndc-key"{
   algorithm hmac-md5;
   secret "1gDFjKPy9Ca2fJwSFUBlk3dS/dGyWnLluh4b38i4fRI=";
};
controls {
      inet 127.0.0.1 allow { localhost; } keys {" rnd-ckey"; };
};
zone "." IN {
      type hint;
      file "named.ca";
};

zone "localhost" IN {
      type master;
      file "localhost.zone";
      allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
      type master;
      file "named.local";
      allow-update { none; };
};

zone "syd168.com" IN {
      type master;
      file "syd168.com.zone";
};
zone "0.168.192.in-addr.arpa" IN{
      type master;
      file "syd168.com.arpa";
};

include "/etc/rndc.key";

rndc.conf:
/* $Id: rndc.conf,v 1.7 2001/01/09 21:40:45 bwelling Exp $ */

/*
* Sample rndc configuration file.
*/
key "rndc-key" {
   algorithm hmac-md5;
   secret "1gDFjKPy9Ca2fJwSFUBlk3dS/dGyWnLluh4b38i4fRI=";
};

options {
      default-key "rndc-key";
      default-server  127.0.0.1;
      default-port 953;
};

server localhost {
      key rndckey;
};

include "/etc/rndc.key";