TKEY and zone transfer

Kent Tong kent.tong.mo at gmail.com
Wed Jan 30 03:14:04 UTC 2013


Hi all,

On Wed, Jan 30, 2013 at 5:27 AM, Evan Hunt <each at isc.org> wrote:

>
> The key generated by keycreate can then be used on the client side
> to sign transfer requests:
>
>     key negotiated-key.server {
>         algorithm hmac-md5;
>         secret "MlNODIuzTrNMgSLRCFB1Iw==";
>     };
>

Thanks for the kind and excellent replies! So, currently there is no way
for the client to negotiate the key on-demand automatically?


>
>     zone example.com {
>         type slave;
>         masters { 1.2.3.4 key negotiated-key.server };
>         ...
>     };
>

BTW, what is the difference between specifying the key in the "masters"
setting and specifying the key in a server statement?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20130130/1b15603c/attachment.html>


More information about the bind-users mailing list