TSIG badkey

Jens Rosenthal mailings at edv-rosenthal.de
Mon Feb 9 15:11:29 UTC 2004


Hi there,

I'm having real trouble here. Perhaps anyone can help...

I had set up two BIND9 servers with dynamic dnsupdate with keys, etc.
Everithing was fine.

Now one of the machines died and with this machine the key. So I've
created a new key put it in /etc/named.conf in the place of the old
key, reloaded/restarted the named.

On the client I only get:
----
;; ->>HEADER<<- opcode: UPDATE, status: NOTAUTH, id:  10262
;; flags: qr ra ; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1
;; TSIG PSEUDOSECTION:
gateway.home.jason.de.  0       ANY     TSIG    hmac-md5.sig-alg.reg.int. 1076338693 300 0  10262 BADKEY 0
----

On the server I get:
----
Feb 09 15:35:18.841 client ***#***: updating zone 'jason.de/IN': update failed: not authoritative for update zone (NOTAUTH)
----

I tried anything I could image to get it working, but everything
fails...

Hope anyone can get me some help...

Thanks in advance,
Jens Rosenthal



More information about the bind-users mailing list