TSIG signature

Jim Reid jim at rfc1035.com
Tue Apr 3 09:38:28 UTC 2001


>>>>> "Eric" == CHAMPAGNE Eric TPC-SRD <eric.champagne at francetelecom.com> writes:

    Eric> Must i declare TSIG signature to make zones transfert ?  

No. Zone transfers have been around and working long before TSIG was
invented.

    Eric> Can i do zones transfert without the use of TSIG signature ?

Of course.

    Eric> Is it normal to receive this message : ( request has invalid
    Eric> signature: tsig verify failure ) if i don't use any
    Eric> signature?

No. The two statements are contradictory and mutually exclusive. If
you're not using TSIG as you claim, nothing should be sending TSIGs
and so there should be nothing for your server to (attempt to)
verify. The error message indicates your server appears to be
verifying TSIGs. That suggests it is using them.

Post the config files if you want further assistance.


More information about the bind-users mailing list