Re: domain's own a record(s)

2018-09-24 Thread Tony Finch
lejeczek via bind-users  wrote:

> client @0x7fd7a40f2e40 127.0.0.1#9489/key nsupdate_key: updating zone
> 'dom.local/IN': update failed: rejected by secure update (REFUSED)
>
> I'm hoping that I can add another A record to dom.local.
> What is the problem here? I must be something obvious, right?

The "rejected by secure update" error message means that the
`update-policy` checks didn't pass, so you need to examine the zone's
configuration and double-check that your TSIG update key is granted the
right privileges.

Tony.
-- 
f.anthony.n.finchhttp://dotat.at/
Humber, Thames: Northwesterly, 6 or 7 at first in east, otherwise 4 or 5, then
decreasing 3 later. Rough at first in northeast Humber, otherwise slight or
moderate. Showers, becoming fair later. Good.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


domain's own a record(s)

2018-09-21 Thread lejeczek via bind-users

hi everyone

I have a quick questionon possibly trivial issue.
I do:
> update delete ddd.dom.local. 86400 in a 10.3.1.100
> send
and that works, but when I try:
> update add dom.local. 86400 in a 10.3.1.100
> send
update failed: REFUSED

..and in logs:
client @0x7fd7a40f2e40 127.0.0.1#9489/key nsupdate_key: 
updating zone 'dom.local/IN': update failed: rejected by 
secure update (REFUSED)


I'm hoping that I can add another A record to dom.local.
What is the problem here? I must be something obvious, right?
many thanks, L.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users