Dynamic Update Q: weird...

[Mark_Andrews at isc.org]

> # named -v
> BIND 9.2.0

	Upgrade.
 
> I am trying to set up zone's to use dynamic dns.  I am using
> TSIG.  The forward zone works as expected, but the reverse
> doesn't.  I have a workaround, but am curious what I am doing
> wrong (or is it that I need to upgrade to 9.2.X and this is a
> known bug?).
> 
> In my forward domain:
> 
>         allow-update { key DHCP_UPDATER; };
> 
> works like a charm.  But in my reverse domain, it doesn't
> work, but:
> 
>         allow-update { LOCALHOST; };
> 
> does.
> 
> named is logging errors that indicate access is denied to my
> reverse zone.
> 
> Any ideas?

	Double check your dhcpd.conf.
 
> here is the relevent portion of my named.conf
> 
> *    *     * 
> options {
>         directory "/var/named";
> };
> 
> key DHCP_UPDATER {
>         algorithm HMAC-MD5;
>         secret <key priv here>;
> };
> 
> ....
> zone "foo.org" {
>         allow-update { key DHCP_UPDATER; };
>         type master;
>         file "pz/foo.org";
> };
> 
> 
> zone "30.10.10.in-addr.arpa" {
> #        allow-update { LOCALHOST; };
>         allow-update { key DHCP_UPDATER; };
>         type master;
>         file "pz/10.10.30";
> };
> ....
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org