Hi All,<br><br>Alan, I looked that doc over and the only thing I found different than what I used the key string from the .private key file.<br><br>Jim, thanks for the nsupdate pointer. I've never had to delve into that level of debugging. <br>
<br>When using nsupdate, I was able to update the forward and reverse
zones files. I've looked over what I did interactively, and am not
seeing a difference from what I'm wanting to do "automatically" (but
I'll admit I'm getting some sort of cross-eyed over this). Here's my
interactive output (that worked).<br>
<br>[root@dns04 chroot]# nsupdate -d<br>> server 127.0.0.1<br>> key DHCP_UPDATER TrlaHSJXel+L5hqtfev5Gdlwj7B+<div id=":67p">HqcXQiqXMdZ/8mGXhznkRXf6yMDaQ9rXbx45gFgVpW7PFRHXGsZfUKrFlw==<br>> update add 101.20.10.172.in-addr.arpa. 3600 in ptr <a href="http://dhcp.coloradostudios.com" target="_blank">dhcp.coloradostudios.com</a>.<br>
> <br>Reply from SOA query:<br>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31481<br>;; flags: qr aa ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1<br>;; QUESTION SECTION:<br>;101.20.10.172.in-addr.arpa. IN SOA<br>
<br>;; AUTHORITY SECTION:<br>20.10.172.in-addr.arpa. 0 IN SOA <a href="http://dns04.coloradostudios.com" target="_blank">dns04.coloradostudios.com</a>. <a href="http://sysmgr.hd.net" target="_blank">sysmgr.hd.net</a>. <a href="tel:2013032600" value="+12013032600" target="_blank">2013032600</a> 10800 3600 604800 86400<br>
<br>;; TSIG PSEUDOSECTION:<br>dhcp_updater. 0 ANY TSIG <a href="http://hmac-md5.sig-alg.reg.int" target="_blank">hmac-md5.sig-alg.reg.int</a>. 1364498781 300 16 ZQBZwvuMnMJmgF3exPs7Nw== 31481 NOERROR 0 <br>
<br>Found zone name: 20.10.172.in-addr.arpa<br>
The master is: <a href="http://dns04.coloradostudios.com" target="_blank">dns04.coloradostudios.com</a><br>Sending update to 127.0.0.1#53<br>Outgoing update query:<br>;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 22770<br>
;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 1<br>;; UPDATE SECTION:<br>101.20.10.172.in-addr.arpa. 3600 IN PTR <a href="http://dhcp.coloradostudios.com" target="_blank">dhcp.coloradostudios.com</a>.<br><br>
;; TSIG PSEUDOSECTION:<br>
dhcp_updater. 0 ANY TSIG <a href="http://hmac-md5.sig-alg.reg.int" target="_blank">hmac-md5.sig-alg.reg.int</a>. 1364498781 300 16 SyvXSO/PE5Gr/LrR0Cw9nQ== 22770 NOERROR 0 <br><br><br>Reply from update query:<br>
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 22770<br>
;; flags: qr ra; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1<br>;; ZONE SECTION:<br>;20.10.172.in-addr.arpa. IN SOA<br><br>;; TSIG PSEUDOSECTION:<br>dhcp_updater. 0 ANY TSIG <a href="http://hmac-md5.sig-alg.reg.int" target="_blank">hmac-md5.sig-alg.reg.int</a>. 1364498781 300 16 AllUYyqyOwwMkv2SMfcyHg== 22770 NOERROR 0 <br>
<br>> <br><br><br><br><br><br><br><br><br><br><br><br>> server 127.0.0.1<br>> key DHCP_UPDATER TrlaHSJXel+L5hqtfev5Gdlwj7B+HqcXQiqXMdZ/8mGXhznkRXf6yMDaQ9rXbx45gFgVpW7PFRHXGsZfUKrFlw==<br>> <br>> update add <a href="http://dhcp-172-10-20-101.dhcp.coloradostudios.com" target="_blank">dhcp-172-10-20-101.dhcp.coloradostudios.com</a> 3600 IN A <a href="http://dhcp.coloradostudios.com" target="_blank">dhcp.coloradostudios.com</a>.<br>
28-Mar-2013 13:36:40.447 dns_rdata_fromtext: buffer-0x7f302626f710:1: near 'dhcp.coloradostudios.com.': bad dotted quad<br>invalid rdata format: bad dotted quad<br>> update add <a href="http://proccilap.dhcp.coloradostudios.com" target="_blank">proccilap.dhcp.coloradostudios.com</a> 86400 A 172.10.20.101<br>
> send<br>Reply from SOA query:<br>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12184<br>;; flags: qr aa ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1<br>;; QUESTION SECTION:<br>;<a href="http://proccilap.dhcp.coloradostudios.com" target="_blank">proccilap.dhcp.coloradostudios.com</a>. IN SOA<br>
<br>;; AUTHORITY SECTION:<br><a href="http://dhcp.coloradostudios.com" target="_blank">dhcp.coloradostudios.com</a>. 0 IN SOA <a href="http://dns04.coloradostudios.com" target="_blank">dns04.coloradostudios.com</a>. <a href="http://sysmgr.axs.tv" target="_blank">sysmgr.axs.tv</a>. <a href="tel:2013032801" value="+12013032801" target="_blank">2013032801</a> 10800 3600 604800 86400<br>
<br>;; TSIG PSEUDOSECTION:<br>dhcp_updater. 0 ANY TSIG <a href="http://hmac-md5.sig-alg.reg.int" target="_blank">hmac-md5.sig-alg.reg.int</a>. 1364499508 300 16 Exdx5vgPto6sSf2nNau9iQ== 12184 NOERROR 0 <br>
<br>Found zone name: <a href="http://dhcp.coloradostudios.com" target="_blank">dhcp.coloradostudios.com</a><br>
The master is: <a href="http://dns04.coloradostudios.com" target="_blank">dns04.coloradostudios.com</a><br>Sending update to 127.0.0.1#53<br>Outgoing update query:<br>;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 22408<br>
;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 1<br>;; UPDATE SECTION:<br><a href="http://proccilap.dhcp.coloradostudios.com" target="_blank">proccilap.dhcp.coloradostudios.com</a>. 86400 IN A 172.10.20.101<br>
<br>;; TSIG PSEUDOSECTION:<br>
dhcp_updater. 0 ANY TSIG <a href="http://hmac-md5.sig-alg.reg.int" target="_blank">hmac-md5.sig-alg.reg.int</a>. 1364499508 300 16 hREc0P/HnhR/ynAe09xELw== 22408 NOERROR 0 <br><br><br>Reply from update query:<br>
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 22408<br>
;; flags: qr ra; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1<br>;; ZONE SECTION:<br>;<a href="http://dhcp.coloradostudios.com" target="_blank">dhcp.coloradostudios.com</a>. IN SOA<br><br>;; TSIG PSEUDOSECTION:<br>
dhcp_updater. 0 ANY TSIG <a href="http://hmac-md5.sig-alg.reg.int" target="_blank">hmac-md5.sig-alg.reg.int</a>. 1364499508 300 16 /bLrKPzY8+pUuw8RM2MPQA== 22408 NOERROR 0 <br>
<br>> <br><br><br><br>[root@dns04 chroot]# rndc freeze<br>[root@dns04 chroot]# rndc thaw<br><br><br><br>[root@dns04 keys]# ll ../../var/named/slaves/<br>total 24<br>-rw-r--r-- 1 named named 390 Mar 28 13:40 db.172.10.20<br>
-rw-r--r-- 1 named named 792 Mar 28 13:26 db.172.10.20.jnl<br>-r--r--r-- 1 named named 7346 Feb 15 09:06 <a href="http://db.den.coloradostudios.com" target="_blank">db.den.coloradostudios.com</a><br>-rw-r--r-- 1 named named 362 Mar 28 13:41 <a href="http://db.dhcp.coloradostudios.com" target="_blank">db.dhcp.coloradostudios.com</a><br>
-rw-r--r-- 1 named named 782 Mar 28 13:38 db.dhcp.coloradostudios.com.jnl<br>[root@dns04 keys]# ll ../../var/named/slaves/<br>total 16<br>-rw-r--r-- 1 named named 390 Mar 28 13:40 db.172.10.20<br>-r--r--r-- 1 named named 7346 Feb 15 09:06 <a href="http://db.den.coloradostudios.com" target="_blank">db.den.coloradostudios.com</a><br>
-rw-r--r-- 1 named named 362 Mar 28 13:41 <a href="http://db.dhcp.coloradostudios.com" target="_blank">db.dhcp.coloradostudios.com</a><br>[root@dns04 keys]# cat ../../var/named/slaves/<a href="http://db.dhcp.coloradostudios.com" target="_blank">db.dhcp.coloradostudios.com</a> <br>
$ORIGIN .<br>$TTL 86400 ; 1 day<br><a href="http://dhcp.coloradostudios.com" target="_blank">dhcp.coloradostudios.com</a> IN SOA <a href="http://dns04.coloradostudios.com" target="_blank">dns04.coloradostudios.com</a>. <a href="http://sysmgr.axs.tv" target="_blank">sysmgr.axs.tv</a>. (<br>
<a href="tel:2013032802" value="+12013032802" target="_blank">2013032802</a> ; serial<br> 10800 ; refresh (3 hours)<br> 3600 ; retry (1 hour)<br> 604800 ; expire (1 week)<br>
86400 ; minimum (1 day)<br>
)<br> NS <a href="http://dns04.coloradostudios.com" target="_blank">dns04.coloradostudios.com</a>.<br>$ORIGIN <a href="http://dhcp.coloradostudios.com" target="_blank">dhcp.coloradostudios.com</a>.<br>
proccilap A 172.10.20.101<br>
[root@dns04 keys]# cat ../../var/named/slaves/db.172.10.20 <br>$ORIGIN .<br>$TTL 86400 ; 1 day<br>20.10.172.in-addr.arpa IN SOA <a href="http://dns04.coloradostudios.com" target="_blank">dns04.coloradostudios.com</a>. <a href="http://sysmgr.hd.net" target="_blank">sysmgr.hd.net</a>. (<br>
<a href="tel:2013032601" value="+12013032601" target="_blank">2013032601</a> ; serial<br> 10800 ; refresh (3 hours)<br> 3600 ; retry (1 hour)<br> 604800 ; expire (1 week)<br>
86400 ; minimum (1 day)<br>
)<br> NS <a href="http://dns04.den.coloradostudios.com" target="_blank">dns04.den.coloradostudios.com</a>.<br>$ORIGIN 20.10.172.in-addr.arpa.<br>$TTL 3600 ; 1 hour<br>101 PTR <a href="http://dhcp.coloradostudios.com" target="_blank">dhcp.coloradostudios.com</a>.<br>
[root@dns04 keys]# <br><br><br></div><br><br><div class="gmail_quote">On Thu, Mar 28, 2013 at 1:05 PM, Jim Bucks <span dir="ltr"><<a href="mailto:jbucks@coloradostudios.com" target="_blank">jbucks@coloradostudios.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi All (sorry for the top-posting)....<br><br>Alan - thanks for the link. I'll be checking it out / looking it over.<br>
<br>Jim,<br><br>Based on the nsupdate output (below), it looks like I've hosed up something in my "key". I used the key string from the .private key file (I've found some search results that say to use the .key and others say to use the .private).<br>
<br>Jim<br><br>[root@dns04 chroot]# nsupdate -d<br>> server 127.0.0.1<br>> key DHCP_UPDATE TrlaHSJXel+L5hqtfev5Gdlwj7B+HqcXQiqXMdZ/8mGXhznkRXf6yMDaQ9rXbx45gFgVpW7PFRHXGsZfUKrFlw==<br>> update add 101.20.10.172.in-addr.arpa. 3600 in ptr <a href="http://dhcp.coloradostudios.com" target="_blank">dhcp.coloradostudios.com</a>. <br>
> <br>Reply from SOA query:<br>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11212<br>;; flags: qr aa ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0<br>;; QUESTION SECTION:<br>;101.20.10.172.in-addr.arpa. IN SOA<br>
<br>;; AUTHORITY SECTION:<br>20.10.172.in-addr.arpa. 0 IN SOA <a href="http://dns04.coloradostudios.com" target="_blank">dns04.coloradostudios.com</a>. <a href="http://sysmgr.hd.net" target="_blank">sysmgr.hd.net</a>. <a href="tel:2013032600" value="+12013032600" target="_blank">2013032600</a> 10800 3600 604800 86400<br>
<br>Found zone name: 20.10.172.in-addr.arpa<br>The master is: <a href="http://dns04.coloradostudios.com" target="_blank">dns04.coloradostudios.com</a><br>Sending update to 127.0.0.1#53<br>Outgoing update query:<br>;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 25308<br>
;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 1, ADDITIONAL: 1<br>;; UPDATE SECTION:<br>101.20.10.172.in-addr.arpa. 3600 IN PTR <a href="http://dhcp.coloradostudios.com" target="_blank">dhcp.coloradostudios.com</a>.<br><br>
;; TSIG PSEUDOSECTION:<br>
dhcp_update. 0 ANY TSIG <a href="http://hmac-md5.sig-alg.reg.int" target="_blank">hmac-md5.sig-alg.reg.int</a>. 1364496936 300 16 qUBZdqVmksNQtmb1mb9gNQ== 25308 NOERROR 0 <br><br>; TSIG error with server: tsig indicates error<br>
<br>Reply from update query:<br>;; ->>HEADER<<- opcode: UPDATE, status: NOTAUTH, id: 25308<br>;; flags: qr ra; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1<br>;; ZONE SECTION:<br>;20.10.172.in-addr.arpa. IN SOA<br>
<br>;; TSIG PSEUDOSECTION:<br>dhcp_update. 0 ANY TSIG <a href="http://hmac-md5.sig-alg.reg.int" target="_blank">hmac-md5.sig-alg.reg.int</a>. 1364496936 300 0 25308 BADKEY 0 <br><br>> quit<br>[root@dns04 chroot]# <br>
<br><br><div class="gmail_quote">On Thu, Mar 28, 2013 at 12:03 PM, Jim Glassford <span dir="ltr"><<a href="mailto:jmglass@iup.edu" target="_blank">jmglass@iup.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>Hi Jim,<br>
<br>
No, sorry, wrong IP address, the real IP address of the dns
server, not the client.<br>
<br>
zone <a href="http://dhcp.coloradostudios.com" target="_blank">dhcp.coloradostudios.com</a>.
{<br>
primary your_dns_server_IP_address;
<----- change from 127.0.0.1 <br>
key DHCP_UPDATER;<br>
}<br>
<br>
Also do you have a /var/log/named.log file or debug log file for
named, other than messages, might have more information.<br>
Can try nsupdate with debug to see if this gives any clue also.<br>
nsupdate -d<br>
> server your_dns_server_here<br>
> key your_key_here<br>
> update add 101.20.10.172.in-addr.arpa. 3600 in ptr <a href="http://dhcp-172-10-20-101.coloradostudios.com" target="_blank">dhcp-172-10-20-101.coloradostudios.com</a>.<br>
> do extra CR to get it to go<br>
<br>
should see lots of debug information here<br>
><br>
> quit<br>
<br>
man nsupdate<br>
<br>
best!<br>
jim<br>
<br></div></div></blockquote></div></blockquote></div><br>-- <br>Jim Bucks - IT Director <br><a href="http://www.coloradostudios.com" target="_blank">Colorado Studios</a>,
<a href="http://www.mobiletvgroup.com" target="_blank"> Mobile TV Group</a>, <a href="http://www.hd.net" target="_blank">HDNet</a>, <a href="http://www.axs.tv/" target="_blank">AXS.tv</a><br>8269 E. 23rd Ave. Denver, CO 80238 Main 303-388-8500
<br><a href="mailto:jbucks@coloradostudios.com" target="_blank">jbucks@coloradostudios.com</a> Direct 303-542-5520