Aight 🙈
Session.key is actually a session key.
It changes when bind is restarted, on a different server it's different anyway.
LOL
I configured a static key now.
El 5 de noviembre de 2024 18:37:05 CET, Marki <bind-us...@lists.roth.lu>
escribió:
>Hello,
>
>I was converting a config to use views which is when these problems started.
>
>The config:
>
>---------------------------------------
>---------------------------------------
>---------------------------------------
>view first {
>
> # nothing matches this
>
>... zones here ....
>
>}; # end view first
>
>view inside {
>
> match-clients {
> key local-ddns;
> inside-nets; # includes localhost
> };
> allow-query {
> ... includes localhost
> };
> allow-transfer {
> ... includes localhost
> };
> also-notify {
> notify-hosts;
> };
> notify explicit;
>
>
>...
>
> zone "example.com" in {
> type master;
> file "master/example.com.zone";
> update-policy local;
> check-names warn;
> forwarders {};
> };
>
>};
>---------------------------------------
>---------------------------------------
>---------------------------------------
>
>
>Command I use is
>
>nsupdate -l -k session.key updatefile
>
>Error is
>
>127.0.0.1#52990: view inside: request has invalid signature: TSIG local-ddns:
>tsig verify failure (BADSIG)
>
>So it knows to use the zone "inside". But it won't update the zone.
>
>I've tried adding the key to the different "match" and "allow" blocks to no
>avail.
>
>Bind 9.16.6 on SLES15-SP3.
>
>Thoughts?
>
>Thanks,
>Marki
>--
>Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
>this list
>
>ISC funds the development of this software with paid support subscriptions.
>Contact us at https://www.isc.org/contact/ for more information.
>
>
>bind-users mailing list
>bind-users@lists.isc.org
>https://lists.isc.org/mailman/listinfo/bind-users
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
