On Wed, 16 Feb 2011 17:33:54 -0500 Robert Edmonds <edmo...@debian.org> wrote: > note that the stock unbound package does not set up unbound-control:
Good point. > the BIND9 equivalent to unbound-control is rndc, and i believe the bind9 > package automatically sets up the necessary rndc shared secret. > > should the unbound package automatically set up the necessary key > material and configuration for unbound-control? I have no strong opinion about that but I guess I would say that bind has set the precedent, so yes. By the way, bind appears to set up rndc partly because it wants to make use of it for the "stop" and "reload" actions of the init script. > also note that rndc is available in a separate package (bind9utils). > should unbound-control{,-setup} go in a separate unbound-utils package > as well, so that one can control a remote unbound server without > installing the unbound package? I don't think that's especially necessary. I've worked at several ISPs in the past and I've never met a DNS administrator who wanted to manage DNS without logging in to the server. -Phil -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org