TSIG inconsistency

Stephens, Bill {PBSG} Bill.Stephens at pbsg.com
Mon Jul 15 16:47:54 UTC 2002



It seems to be consistently the same zones.  I upgraded a backup =
primary to
8.3.3 and the zone transfer ran fine from that one, so I'm suspecting =
it's a
bug in 8.3.1 that was fixed in 8.3.3.


=20
=20

Bill Stephens
PepsiCo Business Solutions Group
Bill.Stephens at pbsg.com
972.376.7155      fax: 972.376.6019
=20
=20

-----Original Message-----
From: phn at icke-reklam.ipsec.nu [mailto:phn at icke-reklam.ipsec.nu]=20
Sent: Monday, July 15, 2002 11:21 AM
To: comp-protocols-dns-bind at isc.org
Subject: Re: TSIG inconsistency


Stephens, Bill {PBSG} <Bill.Stephens at pbsg.com> wrote:

> I have a handful of zones I'm having trouble transferring from my =
primary
to
> secondary.  About 80%-90% of the zones transfer fine between the same =
pair
> of servers.  The remaining zones give me the following error when
attempting
> to transfer:
> Jul 15 10:30:00.332 xfer-in: error: transfer of 'XXXXXXX.pvt/IN' from
> 156.81.229.50#53: failed while receiving responses: expected a TSIG =
or
> SIG(0)=20

> The clocks are in sync, and as I said most zones transfer fine =
between the
> two hosts.  It's just a handful that don't.  I tried turning on debug =
to
> level 3, but it just spit back the same info, expected TSIG.  No =
other
> reason. The primary is bind 8.3.1.  I get the same error if the slave =
is
> 8.3.1 or 9.2.1.

> What could cause some zones to fail and others to succeed?

You did not say if the failing zones are always failing while the ok
zones always work.

If so, i'd look closley on "server" statements in the config ( and=20
possibly "key" statements too.
> =20
> =20

> Bill Stephens
> PepsiCo Business Solutions Group
> Bill.Stephens at pbsg.com
> 972.376.7155      fax: 972.376.6019
> =20
> =20



--=20
Peter H=E5kanson        =20
        IPSec  Sverige      ( At Gothenburg Riverside )
           Sorry about my e-mail address, but i'm trying to keep spam =
out,
	   remove "icke-reklam" if you feel for mailing me. Thanx.


More information about the bind-users mailing list