nsupdate problem after DNSSEC

Phil Mayers p.mayers at imperial.ac.uk
Wed Jan 5 09:19:11 UTC 2011


On 01/05/2011 08:09 AM, Michelle Konzack wrote:
> I have update my<dns1>  to DNSSEC and now I have two probems...

Do you mean you have signed your zone?

If so, you are aware that bind requires the zone-signing key to be 
available in order to perform updates - like this:

zone "$name" {
   type master;
   allow-update { ... };
   key-directory "/var/named/data/keys/$name";
};

...and in /var/named/data/keys/$name you need the:

K$name.+005+id.key
K$name.+005+id.private

...files?



More information about the bind-users mailing list