<html><head></head><body><div dir="auto">Aight 🙈<br>Session.key is actually a session key.<br>It changes when bind is restarted, on a different server it's different anyway.<br>LOL<br>I configured a static key now.</div><br><br><div class="gmail_quote"><div dir="auto">El 5 de noviembre de 2024 18:37:05 CET, Marki <bind-users@lists.roth.lu> escribió:</div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail"><div dir="auto">Hello,<br><br>I was converting a config to use views which is when these problems started.<br><br>The config:<hr>view first {<br><br> # nothing matches this<br><br>... zones here ....<br><br>}; # end view first<br><br>view inside {<br><br> match-clients {<br> key local-ddns;<br> inside-nets; # includes localhost<br> };<br> allow-query {<br> ... includes localhost<br> };<br> allow-transfer {<br> ... includes localhost<br> };<br> also-notify {<br> notify-hosts;<br> };<br> notify explicit;<br><br><br>...<br><br> zone "example.com" in {<br> type master;<br> file "master/example.com.zone";<br> update-policy local;<br> check-names warn;<br> forwarders {};<br> };<br><br>};<hr>Command I use is<br><br>nsupdate -l -k session.key updatefile<br><br>Error is<br><br>127.0.0.1#52990: view inside: request has invalid signature: TSIG local-ddns: tsig verify failure (BADSIG)<br><br>So it knows to use the zone "inside". But it won't update the zone.<br><br>I've tried adding the key to the different "match" and "allow" blocks to no avail.<br><br>Bind 9.16.6 on SLES15-SP3.<br><br>Thoughts?<br><br>Thanks,<br>Marki<br></div></pre></blockquote></div></body></html>