What is TSIG ? And where I can find it ?
בברכה ,

תומר שחף | מהנדס אינטגרציה ותשתיות | חטיבת אינטגרציה ותשתיות | מטריקס | נייד 
054-2686841 |
tomers...@matrix.co.il<mailto:tomers...@matrix.co.il> | 
www.matrix.co.il<http://www.matrix.co.il/>
[image001.jpg]


On 26 Jun 2024, at 20:42, Kilian Cavalotti <kilian.cavalotti.w...@gmail.com> 
wrote:

Hi Calvin,

On Fri, Jun 21, 2024 at 5:47 AM Calvin Sawyer <c.saw...@qmul.ac.uk> wrote:
The issue is no so much what makedns -n will do , but how to actually create a 
CNAME record in xcat's DNS

Running nsupdate using a keyfile containing the key data that exists in both 
named.conf and in passwd tabdb, any change attempt results in :

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADKEY

What I'm hoping to discover is how to add a record manually using nsupdate in 
the same manner as xcat does running makedns <node>.

I usually do something like this to get the TSIG auth key from the
xCAT passwd table, and use it to authenticate nsupdate:

$ xk=$(tabdump -w key==omapi passwd | awk -F, '!/#/ {gsub(/"/,""); print $3}')
$ nsupdate -l -v -y xcat_key:$xk

Hope this helps!

Cheers,
--
Kilian


_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user
זהירות: מקור הדואל הזה הוא מחוץ למטריקס. חל איסור ללחוץ על קישורים או לפתוח 
קבצים מצורפים אלא אם כן השולח מוכר והתוכן בטוח
Caution: The source of this email is from outside Matrix. it is forbidden to 
click on links or open attachments unless you recognize the sender and know the 
content is safe.
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user

Reply via email to