Caused by the fact that the -t option is specified in /etc/sysconfig/named (which is passed to the named daemon on the commandline for chroot to another directory). After removing that line from that file rndc was able to build the socket succesfully on l27.0.0.1:953. -- jan