Hi,

The reason I asked about the web interface, was whether that part was working at all, in case there was a problem with how it was configured.

Have a look in your minidip.conf, and it will show you the nsupdate command that it is trying to use, perhaps this has been incorrectly configured...

The following is how I have it configured:

  # default BIND nsupdate command
  nsupdate = /usr/bin/nsupdate -v
  nsupdate = -k /usr/local/gnudip/etc/Kgnudip-key.+157+00526.private


Kgnudip-key.+157+00526.key is included in my named.conf, which is in the format:


  gnudip-key. IN KEY 0 2 157 xxxxx+xx/xxxxxxxxxxx==

Kgnudip-key.+157+00526.private is in the format:

  Private-key-format: v1.2
  Algorithm: 157 (HMAC_MD5)
  Key: xxxxx+xx/xxxxxxxxxxx==

As you can see, the "key name" in relation to bind is gnudip-key, so in our named.conf:

  include "/usr/local/named/gnudip-keyfile";

  zone "domain.com" in {
        type master;
        file "path/to/domain.com.zone";
        allow-query { any; };
        allow-transfer { localnet; sec.on.dary.ns; };
        update-policy { grant gnudip-key subdomain subdom.domain.com; };
  }

The included gnudip-keyfile must match to both the .private and .key files, as such:

  key gnudip-key. {
          algorithm hmac-md5;
          // the TSIG key generated by nsupdate
          secret "xxxxx+xx/xxxxxxxxxxx==";
  };


Once you have verified that your setup is correct, you should try and do some manual updates using the nsupdate command, with your private key file...


The following URL gives you an example on how to use a pure nsupdate environment without gnudip: http://caunter.ca/nsupdate.txt It should help you do debugging.

Hope this makes sense! :)

Cheers,

Damien




[EMAIL PROTECTED] wrote:
Hi Damien Again

I dont want the web interface, the clientes will connect via ssh or telnet, is a Server of aplications for sales of loto.

what is the full command of nsupdate ??




=================================
Specialist Server Admin OS (*nix)
Web Desing - SoftWare Programer
Hector R. De los Santos
Mail: [EMAIL PROTECTED]
MSN: [EMAIL PROTECTED]
Movil: (809)-972-3202
Linux User #:320363 GNU/Linux Debian Potato User.
==============================



------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click -- GnuDIP Mailing List http://gnudip2.sourceforge.net/gnudip-www/#mailinglist



------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click -- GnuDIP Mailing List http://gnudip2.sourceforge.net/gnudip-www/#mailinglist

Reply via email to