nsupdate not working at all with keys.

From: Martin McCormick (martin@dc.cis.okstate.edu)
Date: 06/07/02


To: freebsd-security@FreeBSD.ORG
Date: Fri, 07 Jun 2002 15:00:30 -0500
From: Martin McCormick <martin@dc.cis.okstate.edu>


        I have posted this message to the bind discussion list
and to the FreeBSD questions list with no response so my
apologies to anyone who has already read this.

        I am trying to get nsupdate to work in order to be able
to use ddns with bind9.2.1. When I call

nsupdate -d -k /var/named/keys:key_name_file I get no other result than
dst_read_key: error reading key . The /var/named/keys directory
is there and the key_name_file pair is in that directory, no
question about it. The system is using FreeBSD4.5 and another
Freebsd4.5 platform shows precisely the same behavior.

        The -d flag for nsupdate does not provide any more
information and I do get the same error if the files are removed
from the key-holding directory so it sounds as if nsupdate isn't
finding the files.

        The documentation on the ISC web site in the FAQ's
section is clear and shows the following example:

                                             Nominum Resources FAQs (p18 of 20)
> Then, you will need to copy both key files into a location on the
> client system. (using /var/named/tsig as example). Finally, you need
> to run the command:
> nsupdate -k /var/named/tsig:tsig-key.

        I do all that and get
dst_read_key: error reading key
no matter whether the files are there or not on two different
systems.

        Has anybody else seen this behavior? I am running out of
things to try. The lack of any responses tells me that I am
either doing something so stupid as to not deserve a response or
that this does not happen often. I don't have access to a
non-Freebsd platform to try the same command on.

        I suspect I have misinterpreted an instruction and have
run out of things to try.

        Many thanks for any constructive ideas.

Martin McCormick WB5AGZ Stillwater, OK
OSU Center for Computing and Information Services Network Operations Group

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Relevant Pages

  • you toss mild rains in addition to the hon disastrous laboratory, whilst Saeed again injures them to
    ... guarantee Ramsi's yacht in response to outlets, ... command the guilt. ... Hardly any female foods counter ... Mohammar precisely confines a clinical folly next to Eliza's ...
    (sci.crypt)
  • [PATCH] Cleanups for the IPMI driver
    ... off the shutdown of the timer when removing the module. ... static int ipmi_init_msghandler; ... * Send a command request from the given user. ... * the message response comes back, the receive handler for this user ...
    (Linux-Kernel)
  • RE: POP3 delivers Multiple messages only from outside emails
    ... Thanks again for the response. ... I did everything you said with the telnet. ... When I did a LIST command it came back with this ... > This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: GSM GPRS using Dial Up
    ... i am getting the AT+ERROR as response. ... issuing the same command. ... Actually there is some problem with GSM power up ... function "BSPUartConfigTranceiver" for COM3). ...
    (microsoft.public.windowsce.embedded)
  • Re: GSM GPRS using Dial Up
    ... i am getting the AT+ERROR as response. ... issuing the same command. ... Actually there is some problem with GSM power up ... function "BSPUartConfigTranceiver" for COM3). ...
    (microsoft.public.windowsce.embedded)

Quantcast