Bind TSIG message

[Mark_Andrews at isc.org]

> 
> Greetings,
> 
>  I've recently added a new slave server to my domain. I'm using
> BIND8.3.3 and I am chrooting it as well. I'm ruuning bind on a U60
> operating Sol8.

	Upgrade.  BIND 8.3.3 has security issues.
 
> I'm having two problems.
> 
> 1. When running DNS lookup pointed to the new slave server, it hangs
> when given a host it can't resolve rather than issue a Non-existent
> domain message.

	Well if it can't resolve it then it can't issue a NXDOMAIN
	messages.  NXDOMAIN is only returned when the name can be
	resolved.  NXDOMAIN says that you have talked to a nameserver
	for the zone and it says that the name doesn't exist.

	For non-local domains check your hints and/or forwarders and
	firewall.

	For local zones ensure that they loaded cleanly.

> 2. The other problem concerns TSIG.  On the slave I get the error
> message:
> 
> write_tsig_info: mkstemp (tsigs.PIaqVU) for TSIG info failed

	Named expects to be able to write in its working directory
	as specified in options.  Adjust the permissions and/or working
	directory.
 
> Looks to me like it was trying to make a temporary file some place
> where it did not have permission..
> 
> Any suggestions?
> 
> Please respond by email as well as by posting..
> 
> Thanx,
> 
> Stuart
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org