Dynamic update rejected within a view

Sten Carlsen stenc at s-carlsen.dk
Tue Jul 14 14:34:48 UTC 2020




-- 
Best regards 
Sten Carlsen 


For every problem, there is a solution that
is simple, elegant, and wrong.
HL Mencken


> On 14 Jul 2020, at 16.25, Mark Andrews <marka at isc.org> wrote:
> 
> Include the update keys in the view selection. 
> 
> -- 
> Mark Andrews
> 
>> On 14 Jul 2020, at 23:06, Per Weisteen <perw at compute-it.no> wrote:
>> 
>> Zones.mydomains.config file contains:
>> 
>>  
>> include "keys/mydomains-keys.conf";
>> include "keys/zone1-keys.conf";
>> include "keys/zone2-keys.conf";
>>  
>> view "external-sites" {
>>     match-clients { !key zone2.key; key zone1.key; external; };
                                                                                                       -----------------------------
>>  
>>     zone "aa.example.net" {
>> Error message in /var/log/named/named.log is :
>> 
>> 
>> 10-Jul-2020 13:27:14.695 update: info: client @0x7f0a200a9b30 10.124.15.148#64606/key arc-zone2.key: view grus-zone2: updating zone 'pacs.telenor.net/IN': update
>> 
                                                                                                                                                                                                -------------------------
Key names do not match.
>> failed: rejected by secure update (REFUSED)
>> 
>> 10-Jul-2020 13:28:13.883 update: info: client @0x7f0a200a9b30 10.124.15.148#64606/key arc-zone2.key: view grus-zone2: updating zone 'pacs.telenor.net/IN': update failed: rejected by secure update (REFUSED)
>> 
>>  
>> 
>> 
>> 
>> -- 
>> Best regards,
>> Per Weisteen
>> 
>> 
>> _______________________________________________
>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>> 
>> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
>> 
>> 
>> bind-users mailing list
>> bind-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20200714/b8a5b2f4/attachment.htm>


More information about the bind-users mailing list