tsig indicates error

[John Miller]

On Fri, Jul 24, 2015 at 10:52 AM, Managed Pvt nets <mpn at icabs.co.zw> wrote:

>  Hi All,
>
> I have recently built a server to act as a secondary / slave for my zones.
> Built on Debian 8.1 and running BIND 9.9.5. On trying to transfer zones
> from my master I am getting this error here, what could I be missing:
>
> ===
> Jul 24 15:33:55 huffer named[493]: zone myzonename.co.zw/IN: refresh:
> failure trying master aaa.bbb.ccc.ddd#53 (source 0.0.0.0#0): tsig indicates
> error
> ===
>
>
Hi Mollatt,

This usually means what it says: there's an error with the TSIG
authentication between master and slave.  Make sure you've got your
allow-transfer statements configured with the proper keys, that you've got
server {} blocks configured with the proper keys, and that a copy of the
slave key lives on the master.

If you're not intending to use TSIG, make sure your master doesn't require
it and that your slave doesn't try to use it for its AXFRs.

John
-- 
John Miller
Systems Engineer
Brandeis University
johnmill at brandeis.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20150724/a9cffaaf/attachment.html>