>>>>> "Kyle" == Kyle <[email protected]> writes:
Kyle> Ah, ok. Thanks for the explanation John.
Kyle> I have never before had to use nsupdate. I just tried it because
Kyle> Peter suggested it and I figured it's a way to test dns updates
Kyle> manually.
Yes --- it'll check that the key you have actually works, and that the
nameserver allows DDNS updates.
The problem you describe has three components ---- it'd be good to try
testing them one at a time.
1. Is named accepting DDNS updates from the machine running DHCPD,
using the same key as DHCPD?
2. Is DHCPD generating DDNS requests for the correct zone?
3. Are clients getting the right address/name combinations?
Peter C
Kyle> I have always used BIND with rndc.key and it used to
Kyle> work. What's then the difference between nsupdate and rndc and
Kyle> using BIND?
Kyle> ------------------------------------------------------------------------
Kyle> Kind Regards
Kyle> Kyle
Kyle> On 15/02/11 6:52 PM, John Clarke wrote:
>> On Tue, Feb 15, 2011 at 05:35:10PM +1100, Kyle wrote:
>>
>>>> domain domain1.com
>>> incorrect section name: domain
>> I suspect you mean "zone domain1.com". "domain" is not a valid
>> command.
>>
>>> nsupdate -k /etc/rndc.key - The man page says that that format
>>> requires a filename in the format
>>> 'K{name}.+157.+{random}.private'. That's a new one on me. Where,
>>> why& how is that needed?
>> That's been the case for as long as I've been using nsupdate, at
>> least five years. The filename format is what dnssec-keygen
>> outputs when you ask it to generate a key.
>>
>> One other thing you need to make sure of is that the client and
>> server have their clocks synchronised (e.g. with ntp), otherwise
>> the update will fail.
>>
>> There's an nsupdate HOWTO here:
>>
>> http://caunter.ca/nsupdate.txt
>>
>> and I have a page explaining how to get DHCP3 to do DDNS updates
>> here:
>>
>> http://kirriwa.net/john/doc/ddns.html
>>
>>
>>
>> John
>>
Kyle> -- SLUG - Sydney Linux User's Group Mailing List -
Kyle> http://slug.org.au/ Subscription info and FAQs:
Kyle> http://slug.org.au/faq/mailinglists.html
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html