You could also switch to using SIG(0) instead of TSIG. The the client can just update the KEY RRset which is stored in the zone.
> On 13 Aug 2021, at 03:49, John Thurston <john.thurs...@alaska.gov> wrote: > > On 8/12/2021 5:00 AM, Tony Finch wrote: >> i.e. using the "subdomain" rule type instead of "selfsub", so the >> domain name (second foo...) doesn't need to match the keyname (first >> foo...) > > > Yes, indeed. That's the ticket. > Thank you very much, Tony. > > -- > Do things because you should, not just because you can. > > John Thurston 907-465-8591 > john.thurs...@alaska.gov > Department of Administration > State of Alaska > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users