how to sign tsig using nsupdate tool

Kevin Darcy kcd at daimlerchrysler.com
Fri Feb 23 00:41:07 UTC 2001


I run nsupdate like this all of the time without any problems. Are you sure
that the user ID you're running as can *read* the key file(s)? Are you sure
the key name matches *exactly* (usually there's a period at the end of a key
name)?


- Kevin

Amy Yi wrote:

> Hi, gang., do you know how to sign TSIG using nsupdate?
> I had a try.
> Firstly, I generated the key pair files and put them under /var/named/tsig
> directory. The key in the file is named "tsig-key". And then I try to type
> ns_update -k /var/named/tsig:tsig-key.But, then I got the error message:
>  " dst_read_key: error reading key".
>
> If you could give me some hint, it will be great!
> thanks
> amy





More information about the bind-users mailing list