Trouble publishing dkim via nsupdate

Mark Andrews Mark_Andrews at isc.org
Fri Mar 13 03:32:32 UTC 2009


In message <20090313031347.GA19638 at csy.ca>, Shane W writes:
> Hey all,
> 
> I am trying to publish a dkim record in a signed dynamic
> zone using nsupdate.  My query looks like the below but
> nsupdate is having none of it, giving formerr.  Can anyone
> see an obvious error with this query:  Pasting the entry
> directly into the zone (freeze/thaw) does work but then the
> record doesn't get signed.
> 
> nsupdate:
> zone csy.ca
> update delete continuum._domainkey.csy.ca any
> update add continuum._domainkey.csy.ca 86400 txt "k=rsa\; t=y\; p=MIGfMA0GCSq
> GSIb3DQEBAQUAA4GNADCBiQKBgQDGDqQOjvR2NkesUp+rMl164OdruvyT/hcvwWpPJVZZpYJ7C0rU
> FoZeGdIsi0Riv8wbMd0YspPEfXEslt+neNBTp+nGtkbzpV23PnVwxaqaCpUOZtc7LN2BTKLnpQATL
> 30JJE6LwafHPmM5I9S6y1pBQBV9KLdBuxG4+xlIwQf6HwIDAQAB"
> send

Remove the "any" from the delete command.
update delete continuum._domainkey.csy.ca


> output with -d
> Reply from SOA query:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:  11757
> ;; flags: qr aa rd ra ; QUESTION: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4
> ;; QUESTION SECTION:
> ;csy.ca.                                ANY     SOA
> 
> ;; ANSWER SECTION:
> csy.ca.                 86400   IN      SOA     continuum.ns.csy.ca. hostmast
> er.csy.ca. 207 14400 900 2419200 3600
> 
> ;; AUTHORITY SECTION:
> csy.ca.                 86400   IN      NS      dme6.ns.csy.ca.
> csy.ca.                 86400   IN      NS      dme7.ns.csy.ca.
> csy.ca.                 86400   IN      NS      continuum.ns.csy.ca.
> csy.ca.                 86400   IN      NS      dme5.ns.csy.ca.
> 
> ;; ADDITIONAL SECTION:
> dme5.ns.csy.ca.         86400   IN      A       63.219.151.12
> dme6.ns.csy.ca.         86400   IN      A       64.246.42.203
> dme7.ns.csy.ca.         86400   IN      A       205.234.170.139
> continuum.ns.csy.ca.    3600    IN      A       70.71.3.27
> 
> Found zone name: csy.ca
> The master is: continuum.ns.csy.ca
> Sending update to 70.71.3.27#53
> Outgoing update query:
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:   2080
> ;; flags: ; ZONE: 1, PREREQ: 0, UPDATE: 2, ADDITIONAL: 0
> ;; ZONE SECTION:
> ;csy.ca.                                ANY     SOA
> 
> ;; UPDATE SECTION:
> continuum._domainkey.csy.ca. 0  ANY     ANY
> continuum._domainkey.csy.ca. 86400 ANY  TXT     "k=rsa\; t=y\; p=MIGfMA0GCSqG
> SIb3DQEBAQUAA4GNADCBiQKBgQDGDqQOjvR2NkesUp+rMl164OdruvyT/hcvwWpPJVZZpYJ7C0rUF
> oZeGdIsi0Riv8wbMd0YspPEfXEslt+neNBTp+nGtkbzpV23PnVwxaqaCpUOZtc7LN2BTKLnpQATL3
> 0JJE6LwafHPmM5I9S6y1pBQBV9KLdBuxG4+xlIwQf6HwIDAQAB"
> 
> 
> Reply from update query:
> ;; ->>HEADER<<- opcode: UPDATE, status: FORMERR, id:   2080
> ;; flags: qr ; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
> 
> Thanks,
> Shane
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the bind-users mailing list