You nailed it, Kilian - worked like a charm. The "-y " flag was the magic (i 
had been trying to use xcat_key with "-k <file_containing_keydata>". It's also 
necessary to use fqdn:

> zone <zonee>
> update add CNAME.zone 86400 CNAME ANAME.zone
> send

thanks very much!

Cal Sawyer
ITS Research Platforms Manager
Queen Mary University of London
________________________________
From: Kilian Cavalotti <kilian.cavalotti.w...@gmail.com>
Sent: 26 June 2024 18:39
To: xCAT Users Mailing list <xcat-user@lists.sourceforge.net>
Subject: Re: [xcat-user] [External] Manually add CNAME records to xcat-managed 
DNS?

[Some people who received this message don't often get email from 
kilian.cavalotti.w...@gmail.com. Learn why this is important at 
https://aka.ms/LearnAboutSenderIdentification ]

CAUTION: This email originated from outside of QMUL. Do not click links, scan 
QR codes or open attachments unless you recognise the sender and know the 
content is safe.


Hi Calvin,

On Fri, Jun 21, 2024 at 5:47 AM Calvin Sawyer <c.saw...@qmul.ac.uk> wrote:
> The issue is no so much what makedns -n will do , but how to actually create 
> a CNAME record in xcat's DNS
>
> Running nsupdate using a keyfile containing the key data that exists in both 
> named.conf and in passwd tabdb, any change attempt results in :
>
> ; TSIG error with server: tsig indicates error
> update failed: NOTAUTH(BADKEY
>
> What I'm hoping to discover is how to add a record manually using nsupdate in 
> the same manner as xcat does running makedns <node>.

I usually do something like this to get the TSIG auth key from the
xCAT passwd table, and use it to authenticate nsupdate:

$ xk=$(tabdump -w key==omapi passwd | awk -F, '!/#/ {gsub(/"/,""); print $3}')
$ nsupdate -l -v -y xcat_key:$xk

Hope this helps!

Cheers,
--
Kilian


_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fxcat-user&data=05%7C02%7Cc.sawyer%40qmul.ac.uk%7C8f8d4f7cdb664cb444ed08dc96074088%7C569df091b01340e386eebd9cb9e25814%7C0%7C0%7C638550205103029916%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=GRQDLRCmI2E2fT3vB1FJEsY0RRTaGiYbWK3s5t%2Fjrxs%3D&reserved=0<https://lists.sourceforge.net/lists/listinfo/xcat-user>
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user

Reply via email to