Setting up tkey
marka at isc.org
Wed Jun 3 23:52:24 UTC 2009
In message <20090603165304.GA28208 at csy.ca>, Shane Wegner writes:
> I am looking at setting up tkey between master and slave
> nameservers but have been unable to find documentation on
> how to get this going properly. In the bind9 manual, there
> is a whole section on TSIG and setting up shared secrets
> between servers but how does one do it the TKEY way? That
> is, not having to generate different keypairs per host?
It's not supported and I really can't see the need for it.
> >From what I've been able to figure out, the servers
> generate a keypair:
> gnssec-keygen -a dh -b 1024 -n host hostname
> and publish the result in a tkey-key configuration
> directive. But then how does one server recognize the
> other. How is access control done? Does the server just
> trust the keyname given to it by the other side?
> bind-users mailing list
> bind-users at lists.isc.org
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users