Add this to /etc/bind/named.conf in order for rndc to work:

include “/etc/bind/rndc.key”;

controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { “rndc-key”; };
};

Be sure to add it to the right file.

I’m also getting the same error in DNS.

#/etc/init.d/bind9 restart
* Stopping domain name service… bind9
rndc: connect failed: 127.0.0.1#953: connection refused
…done.
* Starting domain name service… bind9

SYSLOG.

May 4 10:52:24 sfdlabs named[2931]: starting BIND 9.6.1-P2 -u bind -t /var/lib/named
May 4 10:52:24 sfdlabs named[2931]: built with ‘–prefix=/usr’ ‘–mandir=/usr/share/man’ ‘–infodir=/usr/share/info’ ‘–sysconfdir=/etc/bind’ ‘–localstatedir=/var’ ‘–enable-threads’ ‘–enable-largefile’ ‘–with-libtool’ ‘–enable-shared’ ‘–enable-static’ ‘–with-openssl=/usr’ ‘–with-gssapi=/usr’ ‘–with-gnu-ld’ ‘–with-dlz-postgres=no’ ‘–with-dlz-mysql=no’ ‘–with-dlz-bdb=yes’ ‘–with-dlz-filesystem=yes’ ‘–with-dlz-ldap=yes’ ‘–with-dlz-stub=yes’ ‘–with-geoip=/usr’ ‘–enable-ipv6′ ‘CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2′ ‘LDFLAGS=-Wl,-Bsymbolic-functions’ ‘CPPFLAGS=’ ‘CXXFLAGS=-g -O2′ ‘FFLAGS=-g -O2′
May 4 10:52:24 sfdlabs named[2931]: adjusted limit on open files from 1024 to 1048576
May 4 10:52:24 sfdlabs named[2931]: found 4 CPUs, using 4 worker threads
May 4 10:52:24 sfdlabs named[2931]: using up to 4096 sockets
May 4 10:52:24 sfdlabs named[2931]: loading configuration from ‘/etc/bind/named.conf’
May 4 10:52:24 sfdlabs named[2931]: none:0: open: /etc/bind/named.conf: permission denied
May 4 10:52:24 sfdlabs named[2931]: loading configuration: permission denied
May 4 10:52:24 sfdlabs named[2931]: exiting (due to fatal error)
May 4 10:52:24 sfdlabs kernel: [1535835.868494] type=1503 audit(1272950544.717:37): operation=”open” pid=2934 parent=2930 profile=”/usr/sbin/named” requested_mask=”r::” denied_mask=”r::” fsuid=107 ouid=107 name=”/var/lib/named/etc/bind/named.conf”

Please help me out,
…fail!