more RNDC madness

[Jim D. Kirby]

Sorry this isn't posted to the Bind 9 list, but I can't seem to subscribe to
it right now.

I've followed all the directions for setting up rndc and rndc.conf and
named.conf but I keep getting errors.  Specifically I get the error:

[root at dnsspare /root]# rndc reload
rndc: send remote authenticator: permission denied
[root at dnsspare /root]# rndc -s 127.0.0.1 reload
rndc: send remote authenticator: permission denied

I can't get any logs to generate either so I'm running blind.
I'm running Bind 9.1.0 on a RedHat 7.0 system.  What simple thing am I
missing?

Thanks,
jk

########  Here's my rndc.conf:

[root at dnsspare /root]# cat /etc/rndc.conf
options {
        default-server  localhost;
        default-key     samplekey;
};

server localhost {
         key     "rndc";
};

server  "127.0.0.1" {
         key     "rndc";
};

key "rndc" {
         algorithm "hmac-md5";
         secret "Ymx1ZWJ1bm55Cg==";
};

##########  and the relevant portions of named.conf:

controls {
        inet 127.0.0.1 allow { any; } keys { rndckey; };
        inet 172.30.22.69 allow { any; } keys { "rndckey"; };
};

key "rndckey" {
         algorithm "hmac-md5";
         secret "Ymx1ZWJ1bm55Cg==";
};