BIND 8.2.4, FreeBSD 4-stable/5-current, Dynamic DNS broken

Makoto MATSUSHITA matusita at matatabi.or.jp
Mon Aug 6 05:22:48 UTC 2001




I've installed BIND 8.2.4 to my FreeBSD box (5-current and 4-stable),
and found that dynamic DNS with a TSIG key is totally broken.

1) nsupdate can't read keyfile

I'm using TSIG for dynamic DNS. However, it seems that nsupdate can't
read my keyfile generated. Here is a sample session:

% pwd
/tmp/a
% dnskeygen -H 128 -h -n test.
Generating 128 bit HMAC-MD5 Key for test.

Generated 128 bit Key for test. id=17023 alg=157 flags=513

% nsupdate -k /tmp/a:test.
dst_read_key: error reading key
% ls
Ktest.+157+17023.key            Ktest.+157+17023.private

BIND 8.2.3 works pretty fine. Temporary workaround is to backup old
nsupdate bundled with bind 8.2.3.

2) named dumps core if update packet was received

Problem is not only nsupdate, but also named daemon. When named
receives an update packet, named dies with following syslog message:

Aug  6 13:35:11 hostname named[55257]: successfully merged update id 7538 from log file MY_DOMAIN_NAME.log
Aug  6 13:35:11 hostname named[55257]: d_rcnt-- == 0
Aug  6 13:35:11 hostname named[55257]: d_rcnt-- == 0

Note that named of bind 8.2.3 works fine to me.

***

Anybody knows what's the problem? Please cc: to me since I'm not yet a
subscriber of this list.

Thanks in advance,
-- -
Makoto `MAR' MATSUSHITA


More information about the bind-users mailing list