[Kea-users] kea not updating bind9

[Darren Ankney]

Hi Charles,

While testing, you can enable update-on-renew (see here:
https://kea.readthedocs.io/en/kea-3.0.1/arm/dhcp4-srv.html#ddns-for-dhcpv4)
to make Kea more talkative with the DNS server.

Thank you,
Darren Ankney

On Tue, Sep 23, 2025 at 2:39 PM Charles Curley
<charlescurley at charlescurley.com> wrote:
>
> On Tue, 23 Sep 2025 02:05:40 -0500
> Doug Freed <dwfreed at isc.org> wrote:
>
> > Kea does not use DNS-aware name comparisons, but simple
> > case-insensitive string comparisons, when attempting to locate a
> > matching domain in your configuration for a DDNS update request.
> > FQDNs in update requests will always end with a trailing period, but
> > your domain name in your DDNS config does not, which is what's
> > causing the error.
>
> Ah, thank you.
>
> So this:
>
>   "forward-ddns" : {
>       "ddns-domains" : [
>           {
>                "name": "localdomain",
>
> should be this:
>
>   "forward-ddns" : {
>       "ddns-domains" : [
>           {
>                "name": "localdomain.",  <---
>
> and I (now) see the . after the arpa in the reverse domain. I applied
> that, and will await the next request.
>
> I did get a "successful" lease removal request. I say successful in
> quotes because the entry wasn't actually in DNS, so named didn't have
> anything to do. After several hours, there was nothing else, so I
> shut down all three servers, moved aside the two kea-leases4.csv files,
> and restarted all three servers. I got two successful adds. So I think
> that solved that. Thank you.
>
>
> >
> > Note that while you redacted your TSIG key from your BIND config
> > before posting, you did not do the same for your DDNS config.  Since
> > you're using RFC 1918 IP addresses, this may not be a real concern,
> > but I thought I'd point it out just in case.
>
> Thank you for pointing that out. As you say, probably not an issue.
> Still, I created a new key with tsig-keygen. Easy enough. Paranoids
> live longer. :-)
>
> >
> > -Doug
>
>
> --
> Does anybody read signatures any more?
>
> https://charlescurley.com
> https://charlescurley.com/blog/
> --
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
>
> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
> Kea-users at lists.isc.org