| bind9 under Linux & Subdomain in BIND9 [message #689446] |
Wed, 27 December 2023 09:46  |
 |
DarkwingDuck
Messages: 4
Registered: December 2023
|
Junior Member |
|
|
Hi
I installed bind9 under Linux 8.9.
To control the access to the dns server I defined an keyfile:
ls -l /etc/penny.key
-rw-r--r--. 1 root named 101 Dec 10 21:32 /etc/penny.key
key "pennyskey" {
algorithm hmac-sha256;
secret "xxxxxxxxxxxxxxxxxxxxxxxxxxx=";
};
This is included in /etc/named.conf:
include "/etc/penny.key";
zone "darkwing.net" IN {
type master;
file "/var/named/db.darkwing.net.zone";
allow-update { key “pennyskey”; };
};
[root@orarouter etc]# ls -l /var/named/db.*
-rw-r--r--. 1 root named 712 Dec 20 22:34 /var/named/db.100.168.192.in-addr.arpa
-rw-r--r--. 1 root named 427 Dec 24 23:02 /var/named/db.211.168.192.in-addr.arpa
-rw-r--r--. 1 root named 425 Dec 24 23:03 /var/named/db.212.168.192.in-addr.arpa
-rw-r--r--. 1 root named 430 Dec 23 14:54 /var/named/db.50.168.192.in-addr.arpa
-rw-r--r--. 1 root named 488 Dec 17 13:53 /var/named/db.52.168.192.in-addr.arpa
-rw-r--r--. 1 root named 487 Dec 17 13:54 /var/named/db.53.168.192.in-addr.arpa
-rw-r--r--. 1 root named 1808 Dec 26 19:29 /var/named/db.darkwing.net.zone
[root@orarouter etc]#
Then I tried to check if everything works:
export HMAC=hmac-sha256:pennyskey:xxxxxxxxx
nsupdate -y $HMAC
> nsupdate -y $HMAC
> server localhost
> zone darkwing.net
> update add test.darkwing.net. 600 IN A 192.168.50.99
> send
However, this fails:
update failed: REFUSED
journalctl -xe shows:
Dec 27 16:07:52 orarouter.darkwing.net named[1546]: client @0x7f1e540c0ab0 ::1#50577/key pennyskey: signer "pennyskey" denied
Dec 27 16:07:52 orarouter.darkwing.net named[1546]: client @0x7f1e540c0ab0 ::1#50577/key pennyskey: update 'darkwing.net/IN' denied
Can anyone give me a helping hand?
Thanks
Christian
|
|
|
|
|
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
