nsupdate reject

Noel Butler noel.butler at ausics.net
Mon May 20 22:21:18 UTC 2019


did you allow for it under the zone ? Adding a key as such will not give
you global operations 

zone foo { 

         ... 

       allow-update { key "keyname"; }; 

        ... 

} 

and nsLOOKUP ?  Its either to early in the morning here and i'm
mis-reading what you're doing, or you should be using or at least meant
to say, nsUPDATE 

On 20/05/2019 10:27, @lbutlr wrote:

> Trying to update some DNS under a relatively newly installed bin 9.14 with nsupdate.
> 
> I have a file admin.key that looks basically like this:
> key "rndc-key" {
> algorithm hmac-sha256;
> secret "SECRETSTUFF=";
> };
> 
> This is the same key block that is in named.conf. I am launching NSLOOKUP with -k admin.key, but when I try to make a change and then "send", I get "update failed: REFUSED."
> 
> Is this not the key that is wanted? It appears to be the only key I have. Do I need to change to some different key type for bind 9.14, or am I forgetting something else.
> 
> I did make some changes to the DNS back in 9/12 several months ago, and I don't recall having to even provide the key then.

-- 
Kind Regards, 

Noel Butler 

 		This Email, including any attachments, may contain legally privileged
information, therefore remains confidential and subject to copyright
protected under international law. You may not disseminate, discuss, or
reveal, any part, to anyone, without the authors express written
authority to do so. If you are not the intended recipient, please notify
the sender then delete all copies of this message including attachments,
immediately. Confidentiality, copyright, and legal privilege are not
waived or lost by reason of the mistaken delivery of this message. Only
PDF [1] and ODF [2] documents accepted, please do not send proprietary
formatted documents 

 

Links:
------
[1] http://www.adobe.com/
[2] http://en.wikipedia.org/wiki/OpenDocument
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20190521/6191b6db/attachment.html>


More information about the bind-users mailing list