Greetings, How do I proceed with generating a key entry for DNS and DHCP so that DHCP will be allowed to update DNS?? I have tried the option include "/etc/rndc.key" but no luck! :{ Thanks Chadley
Chadley Wilson wrote:
Greetings,
How do I proceed with generating a key entry for DNS and DHCP so that DHCP will be allowed to update DNS??
I have tried the option include "/etc/rndc.key" but no luck! :{
You need to generate it using "rndc-confgen". /Per Jessen, Zürich -- http://www.spamchek.com/ - managed anti-spam and anti-virus solution. Sign up for your free 30-day trial now!
On Tue, 2005-11-08 at 12:01 +0100, Per Jessen wrote:
Chadley Wilson wrote:
Greetings,
How do I proceed with generating a key entry for DNS and DHCP so that DHCP will be allowed to update DNS??
I have tried the option include "/etc/rndc.key" but no luck! :{
You need to generate it using "rndc-confgen".
/Per Jessen, Zürich
-- http://www.spamchek.com/ - managed anti-spam and anti-virus solution. Sign up for your free 30-day trial now!
Aha! Thanks for your input, But now I have another question, Here is the output of rndc-confgen # Start of rndc.conf key "rndc-key" { algorithm hmac-md5; secret "xuI1pUduAcQMXVSXiSi4Ug=="; }; options { default-key "rndc-key"; default-server 127.0.0.1; default-port 953; }; # End of rndc.conf # Use with the following in named.conf, adjusting the allow list as needed: # key "rndc-key" { # algorithm hmac-md5; # secret "xuI1pUduAcQMXVSXiSi4Ug=="; # }; # # controls { # inet 127.0.0.1 port 953 # allow { 127.0.0.1; } keys { "rndc-key"; }; # }; # End of named.conf Now since there is no rndc.conf I did some poking... I found a /etc/rndc.key and /etc/named.d/rndc-access.conf The rndc.key only has these lines in it: key "rndc-key" { algorithm hmac-md5; secret "xuI1pUduAcQMXVSXiSi4Ug=="; }; and the rndc-access.conf include "/etc/rndc.key"; controls { script /etc/init.d/named, inet 127.0.0.1 allow { 127.0.0.0/8; } keys { rndc-key; }; bound addresses }; So I have tried to simply replace the keybut that has failed. So I went and read the man pages of rndc rndc.conf, named and .... and found that in the /usr/share/doc/packages/bind/readme.SUSe it says that for dynamic updates I must move the zones to the dyn/ directory which I have done. I have setup the configs and it appears the be happy with the key. I have also add and allow to the rndc-access for the range of ips assigned by DHCP. But still it won't dynamically update from dhcp, In the system logs it appears to be accepting the key. The error I get in the system log is this: destination on address required Any ideas Chadley
participants (2)
-
Chadley Wilson
-
Per Jessen