Re: Debugging TSIG signed nsupdate problems - Specifically a logging question

In the dnssec.log file I only found references to normal key rotation. Adding the section for update_security and running at trace 99 didn't provide _any_  update_security log output, nor did it provide any extra output to the update log. even when running in single combined log format I coul

Re: Debugging TSIG signed nsupdate problems - Specifically a logging question

Please allow me to refocus this thread to the original question. I'm asking about the logging facility with respect to the "update" section of code in ISC's bind9 product. Yes, I understand update-policy choices/errors will generate the REFUSED response. _I'm only asking about the logging f

Re: Logging question about message 'update-security: error: client update denied'

Okay, yeah I am running DHCP on the same server so I'll check its settings. Thanks! On Mon, May 16, 2016 at 6:08 PM, Matthew Pounsett wrote: > > > On 16 May 2016 at 19:03, Josh Nielsen wrote: > >> Thank you for the response Mark. I'm still a little confused at what this >> might mean though. C

Re: Logging question about message 'update-security: error: client update denied'

In message , Josh Nielsen writes: I have a message that has been showing up in my master DNS server's log over the past few weeks and I am wondering if I can find more verbose specifics from debugging messages in BIND somehow. The messsage looks like this: May 16 10:52:16 dns01 named[2591]: 1

Re: Logging question about message 'update-security: error: client update denied'

On 16 May 2016 at 19:03, Josh Nielsen wrote: > Thank you for the response Mark. I'm still a little confused at what this > might mean though. Clearly the originating address is my slave DNS server > (every single one of the messages say "error: client 10.20.0.101"). > > Are you saying that some p

Re: Logging question about message 'update-security: error: client update denied'

Could it maybe be dhcp related? On Mon, May 16, 2016 at 6:03 PM, Josh Nielsen wrote: > Thank you for the response Mark. I'm still a little confused at what this > might mean though. Clearly the originating address is my slave DNS server > (every single one of the messages say "error: client 10.2

Re: Logging question about message 'update-security: error: client update denied'

Thank you for the response Mark. I'm still a little confused at what this might mean though. Clearly the originating address is my slave DNS server (every single one of the messages say "error: client 10.20.0.101"). Are you saying that some process other than named on the same server (10.20.0.101)

Re: Logging question about message 'update-security: error: client update denied'

In message , Josh Nielsen writes: > Hello, > > I have a message that has been showing up in my master DNS server's log > over the past few weeks and I am wondering if I can find more verbose > specifics from debugging messages in BIND somehow. > > The messsage looks like this: > > May 16 10:5

Logging question about message 'update-security: error: client update denied'

Hello, I have a message that has been showing up in my master DNS server's log over the past few weeks and I am wondering if I can find more verbose specifics from debugging messages in BIND somehow. The messsage looks like this: May 16 10:52:16 dns01 named[2591]: 16-May-2016 10:52:16.844 update

Re: Logging question

update-security In message , wbr...@e1b.org writes: > Running an Ubuntu server with the distro provided named 9.4.2.df. After > taking ISC's Intro to DNS and BIND class, I've gotten the courage to > tackle some of the logging tweaks I would like. All the lame server > errors are hap

Logging question

Running an Ubuntu server with the distro provided named 9.4.2.df. After taking ISC's Intro to DNS and BIND class, I've gotten the courage to tackle some of the logging tweaks I would like. All the lame server errors are happily being delivered to the null channel. I also figured out how to l