Re: tsig indicates error

2015-07-27 Thread Managed Pvt nets
On 24/07/2015 6:07:09 PM, John Miller johnm...@brandeis.edu wrote: On Fri, Jul 24, 2015 at 11:52 AM, Mark Elkins m...@posix.co.za wrote: On Fri, 2015-07-24 at 15:44 +, Managed Pvt nets wrote: On 24/07/2015 5:05:24 PM, Alan Clegg a...@clegg.com wrote: Possible problems:

Re: tsig indicates error

2015-07-27 Thread Tony Finch
Managed Pvt nets m...@icabs.co.zw wrote: Jul 27 14:40:24 hostname named[6016]: zone myzone.co.zw/IN: transferred serial 2015072400: TSIG 'rndc-key' It isn't a very good idea to use the same key for zone transfers and for rndc. It is common to allow zone transfers to third parties, and you

Re: tsig indicates error

2015-07-27 Thread Evan Hunt
On Mon, Jul 27, 2015 at 04:33:06PM +0100, Tony Finch wrote: It isn't a very good idea to use the same key for zone transfers and for rndc. It is common to allow zone transfers to third parties, and you don't want them to be able to fiddle with your name server! Sometimes, in my experience,

Re: tsig indicates error

2015-07-24 Thread Managed Pvt nets
On 24/07/2015 5:03:12 PM, John Miller johnm...@brandeis.edu wrote: If you're not intending to use TSIG, make sure your master doesn't require it and that your slave doesn't try to use it for its AXFRs. I think this is what I have to figure out to do.

Re: tsig indicates error

2015-07-24 Thread John Miller
be missing: === Jul 24 15:33:55 huffer named[493]: zone myzonename.co.zw/IN: refresh: failure trying master aaa.bbb.ccc.ddd#53 (source 0.0.0.0#0): tsig indicates error === Hi Mollatt, This usually means what it says: there's an error with the TSIG authentication between master and slave. Make

Re: tsig indicates error

2015-07-24 Thread John Miller
On Fri, Jul 24, 2015 at 11:52 AM, Mark Elkins m...@posix.co.za wrote: On Fri, 2015-07-24 at 15:44 +, Managed Pvt nets wrote: On 24/07/2015 5:05:24 PM, Alan Clegg a...@clegg.com wrote: Possible problems: Mismatched keys. Mismatched key names. Mismatched clocks.

Re: tsig indicates error

2015-07-24 Thread Alan Clegg
from my master I am getting this error here, what could I be missing: === Jul 24 15:33:55 huffer named[493]: zone myzonename.co.zw/IN: refresh: failure trying master aaa.bbb.ccc.ddd#53 (source 0.0.0.0#0): tsig indicates error === regards, Mollatt

tsig indicates error

2015-07-24 Thread Managed Pvt nets
/IN: refresh: failure trying master aaa.bbb.ccc.ddd#53 (source 0.0.0.0#0): tsig indicates error === regards, Mollatt.___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users

Re: tsig indicates error

2015-07-24 Thread Managed Pvt nets
On 24/07/2015 5:05:24 PM, Alan Clegg a...@clegg.com wrote: Possible problems: Mismatched keys. Mismatched key names. Mismatched clocks. Most likely mismatched key. I have to figure out how to make sure my master does not require TSIGs and my slave does not try to use them.

Re: tsig indicates error

2015-07-24 Thread Mark Elkins
On Fri, 2015-07-24 at 15:44 +, Managed Pvt nets wrote: On 24/07/2015 5:05:24 PM, Alan Clegg a...@clegg.com wrote: Possible problems: Mismatched keys. Mismatched key names. Mismatched clocks. Most likely mismatched key. I have to figure out how to make sure my

Re: tsig indicates error

2015-07-24 Thread Mark Elkins
: failure trying master aaa.bbb.ccc.ddd#53 (source 0.0.0.0#0): tsig indicates error === regards, Mollatt. -- Mark James ELKINS - Posix Systems - (South) Africa m...@posix.co.za Tel: +27.128070590 Cell: +27.826010496 For fast, reliable, low cost Internet in ZA: https