Hi.

It was an elementary mistake.

The following line was added to nsd.conf and
now both nsd-control and rcctl work.


/var/nsd/etc/nsd.conf
-----
remote-control:
                control-enable: yes
                control-interface: /var/run/nsd.sock
                server-key-file: "/var/nsd/etc/nsd_server.key"
                server-cert-file: "/var/nsd/etc/nsd_server.pem"
                control-key-file: "/var/nsd/etc/nsd_control.key"
                control-cert-file: "/var/nsd/etc/nsd_control.pem"

-----

Thank you very much for the valuable points you have raised.


on Sat, 12 Aug 2023 11:49:45 -0000 (UTC)
Stuart Henderson <[email protected]> wrote: 

> On 2023-08-12, Pontus Stenetorp <[email protected]> wrote:
>> On Sat 12 Aug 2023, WATANABE Takeo wrote:
>>> 
>>> I am using nsd, which runs by default on OpenBSD 7.2 amd64.
>>> To update the zone file after changes have been made.
>>> 
>>> # rcctl reload nsd
>>> 
>>> would result in
>>> 
>>> nsd(failed)
>>> 
>>> and cannot be updated.
>>> 
>>> As far as I could find, restarting the host seems to be
>>> the only way to update the zone information.
>>> 
>>> How can I use the rcctl command to reload the zo information,
>>> as I am having trouble dealing with this?
>>> 
>>> -----
>>> # more rc.conf.local
>>> 
>>> nsd_flags=
>>> smtpd_flags=NO
>>> sshd_flags=NO
>>> unbound_flags=
>>
>> No solution, but I am experiencing the same issue on OpenBSD 7.3. You
>> do not need a restart though, you can just dig out the NSD PIDs with
>> grep(1) and ps(1); then pass them to kill(1) and then use rcctl(8). Not
>> pretty, but it works as I have not had the time to dig into what the
>> underlying problem is.
>>
>> etc/rc.conf.local:
>>
>>      nsd_flags=
>>
>> var/nsd/etc/nsd.conf:
>>
>>      server:
>>              hide-version: yes
>>              verbosity: 1
>>              database: ""
>>
>>      remote-control:
>>              control-enable: yes
>>              control-interface: /var/run/nsd.sock
>>
>>      ---8<---
>>
>>
> 
> No problems here with "rcctl reload nsd" on 7.3 or 2-week-old -current,
> though typically I use "nsd-control reload <zonename>" after a change.
> 
> Any clues from rcctl -d reload nsd? Anything relevant in logs? If not
> try bumping up the detail level e.g. "verbosity: 3" 


---
WATANABE, Takeo
[email protected]

Reply via email to