Date: Fri, 07 Jun 2002 15:00:30 -0500 From: Martin McCormick <martin@dc.cis.okstate.edu> To: freebsd-security@FreeBSD.ORG Subject: nsupdate not working at all with keys. Message-ID: <200206072000.g57K0Uw62438@dc.cis.okstate.edu>
next in thread | raw e-mail | index | archive | help
I have posted this message to the bind discussion list
and to the FreeBSD questions list with no response so my
apologies to anyone who has already read this.
I am trying to get nsupdate to work in order to be able
to use ddns with bind9.2.1. When I call
nsupdate -d -k /var/named/keys:key_name_file I get no other result than
dst_read_key: error reading key . The /var/named/keys directory
is there and the key_name_file pair is in that directory, no
question about it. The system is using FreeBSD4.5 and another
Freebsd4.5 platform shows precisely the same behavior.
The -d flag for nsupdate does not provide any more
information and I do get the same error if the files are removed
from the key-holding directory so it sounds as if nsupdate isn't
finding the files.
The documentation on the ISC web site in the FAQ's
section is clear and shows the following example:
Nominum Resources FAQs (p18 of 20)
> Then, you will need to copy both key files into a location on the
> client system. (using /var/named/tsig as example). Finally, you need
> to run the command:
> nsupdate -k /var/named/tsig:tsig-key.
I do all that and get
dst_read_key: error reading key
no matter whether the files are there or not on two different
systems.
Has anybody else seen this behavior? I am running out of
things to try. The lack of any responses tells me that I am
either doing something so stupid as to not deserve a response or
that this does not happen often. I don't have access to a
non-Freebsd platform to try the same command on.
I suspect I have misinterpreted an instruction and have
run out of things to try.
Many thanks for any constructive ideas.
Martin McCormick WB5AGZ Stillwater, OK
OSU Center for Computing and Information Services Network Operations Group
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200206072000.g57K0Uw62438>