OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
BIND 9 and OpenBSD 3.3

From: Reza Muhammad (thugwarthugwar.net)
Date: Fri May 02 2003 - 02:09:31 CDT


Hi all,
I just upgraded my OpenBSD 3.2 to OpenBSD 3.3, and I'm one of the guy who's lost with BIND4 -> BIND9 migration.
What I noticed now in /etc/rc.conf in OpenBSD 3.3, there's no more named_user="named" and named_chroot="/var/named". The process also only looks "named" instead of "named -u named -t /var/named". I also noticed some changes in /etc/rc concerning BIND. In OpenBSD 3.2, it looks like:

# $named_flags, $named_user, and $named_chroot are imported from /etc/rc.conf;
# if $named_flags != NO, named is run.
if [ "X${named_flags}" != X"NO" ]; then
        if [ "X${named_user}" != "X" -a "X${named_user}" != X"root" ]; then
                named_flags="-u ${named_user} ${named_flags}"
        fi
        if [ "X${named_chroot}" != "X" ]; then
                named_flags="-t ${named_chroot} ${named_flags}"
        fi
        echo 'starting named'; named $named_flags
fi

but in 3.3, it looks like:
# if $named_flags != NO, named is run.
if [ "X${named_flags}" != X"NO" ]; then
        if ! cmp -s /etc/rndc.key /var/named/etc/rndc.key ; then
                echo -n "rndc-confgen: generating new shared secret... "
                if /usr/sbin/rndc-confgen -a -t /var/named >/dev/null 2>&1; then
                        chmod 0640 /var/named/etc/rndc.key >/dev/null 2>&1
                        echo done.
                else
                        echo failed.
                fi
        fi

        echo 'starting named'; named $named_flags
fi

Should I change named_flags in rc.conf to be named_flags="-u named -t /var/named" ?
Thanks in advance for any help.
sorry for the confusion

--
Reza Muhammad.
-----
It's not what you know, It's what you can prove.
thugwar{ thugwar.net, gomed.org }