Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 06 Jun 2002 21:55:54 -0500
From:      Martin McCormick <martin@dc.cis.okstate.edu>
To:        freebsd-questions@freebsd.org
Subject:   dst_read_key: error reading key
Message-ID:  <200206070255.g572tsw22117@dc.cis.okstate.edu>

next in thread | raw e-mail | index | archive | help
	I am not sure if this is a FreeBSD issue or a bind issue.
I asked about it on the ISC bind users list and didn't get any
answers of any kind.

	In the domain name server software, is a method of
protecting updates to domain name servers via a key used to sign
the updates.  The application that one can use to dynamically
update a running DNS is called nsupdate and uses one of a number
of different style keys.

	The key I am attempting to use works in other parts of
the dns maintenance process so it should work with nsupdate.

	The documentation is straight-forward enough as to how to
use one's key

nsupdate -k /var/named/keys:the_key_name

assuming, of course that the key is where you say it is.

	I always get the error I showed in the subject line no
matter what I do.

	The only time I get a different error is if I run the
command from my userID and I get an access denied error because
the directory is only accessible from root.

	I even removed the keys temporarily and got the same
error which I expected to change to a "file not found" error.

	Has anybody seen this behavior before and fixed it?  I am
running out of things to try and there is never enough time to be
totally stuck.:-)

	DNS runs as a low-level userID but root is where I try to
run the nsupdate command.  I even thought nsupdate might assume
the named root directory as its root, but that's not true either.

Martin McCormick WB5AGZ  Stillwater, OK 
OSU Center for Computing and Information Services Network Operations Group

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200206070255.g572tsw22117>