Problem using nsupdate -l -k with zone inside view

[marki]

Aight 🙈
Session.key is actually a session key.
It changes when bind is restarted, on a different server it's different anyway.
LOL
I configured a static key now.

El 5 de noviembre de 2024 18:37:05 CET, Marki <bind-users at lists.roth.lu> escribió:
>Hello,
>
>I was converting a config to use views which is when these problems started.
>
>The config:
>
>---------------------------------------
>---------------------------------------
>---------------------------------------
>view first {
>
>  # nothing matches this
>
>... zones here ....
>
>}; # end view first
>
>view inside {
>
>  match-clients {
>    key local-ddns;
>    inside-nets; # includes localhost
>  };
>  allow-query {
>    ... includes localhost
>  };
>  allow-transfer {
>    ... includes localhost
>  };
>  also-notify {
>    notify-hosts;
>  };
>  notify explicit;
>
>
>...
>
>  zone "example.com" in {
>    type master;
>    file "master/example.com.zone";
>    update-policy local;
>    check-names warn;
>    forwarders {};
>  };
>
>};
>---------------------------------------
>---------------------------------------
>---------------------------------------
>
>
>Command I use is
>
>nsupdate -l -k session.key updatefile
>
>Error is
>
>127.0.0.1#52990: view inside: request has invalid signature: TSIG local-ddns: tsig verify failure (BADSIG)
>
>So it knows to use the zone "inside". But it won't update the zone.
>
>I've tried adding the key to the different "match" and "allow" blocks to no avail.
>
>Bind 9.16.6 on SLES15-SP3.
>
>Thoughts?
>
>Thanks,
>Marki
>-- 
>Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
>
>
>bind-users mailing list
>bind-users at lists.isc.org
>https://lists.isc.org/mailman/listinfo/bind-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20241106/7225c5bb/attachment.htm>