Debugging TSIG signed nsupdate problems

[Erik Edwards]

How can I set debug level log for update events?

I've tried "rndc trace 99" which gives *lots* of information expect for 
UPDATE REFUSED issues even thought the channel is set to dynamic severity.

Is there a different way to get named to generate debug level logs for 
UPDATE events?

I'm running BIND 9.18.26 (Extended Support Version) from Fedora 40.

The updates and keys had been working correctly until the update to 
Fedora 40/BIND 9.18.26

The issues I'm experiencing are only applying to a single key & 
update-policy line, other TSIG's are working correctly.

-Erik


-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20240524/40e39104/attachment.sig>