--- tools/etc/dnssec-tools/dnssec-tools.conf.orig 2010-06-22 08:30:12.000000000 -0700 +++ tools/etc/dnssec-tools/dnssec-tools.conf 2010-07-01 10:08:28.607824086 -0700 @@ -12,10 +12,10 @@ # Paths to needed programs. These may need adjusting for individual hosts. # keyarch /usr/bin/keyarch -keygen /usr/local/sbin/dnssec-keygen -rndc /usr/local/sbin/rndc -zonecheck /usr/local/sbin/named-checkzone -zonesign /usr/local/sbin/dnssec-signzone +keygen /usr/sbin/dnssec-keygen +rndc /usr/sbin/rndc +zonecheck /usr/sbin/named-checkzone +zonesign /usr/sbin/dnssec-signzone rollchk /usr/bin/rollchk zonesigner /usr/bin/zonesigner @@ -55,7 +55,7 @@ # Settings that will be noticed by zonesigner. # # default_keyrec output.krf -archivedir /usr/local/etc/dnssec-tools/KEY-SAFE +archivedir /var/dnssec-tools/KEY-SAFE entropy_msg 1 savekeys 1 kskcount 1 @@ -65,7 +65,7 @@ # Settings for rollover-manager. # roll_loadzone 1 -roll_logfile /usr/local/etc/dnssec-tools/log-rollerd +roll_logfile /var/log/dnssec-tools/log-rollerd roll_loglevel info roll_sleeptime 60 # roll_username some_user