Hello all,
I am new to Unix.. i am trying to implement the TSIG in my BIND and using nsupdate to add record to bind..
this is what i did:
generate the TSIG key using : dnssec-keygen HMAC-MD5 -b 128 -n HOST mydns.com
forgot to mention: i am using FreeBSD.
I then edit the named.conf file in /var/named/etc/named with this value :
zone "customer" {
type master;
file "master/customer";
};
Key update.1.168.192.in-addr.arpa.{
algorithm HMAC-MD5;
secret "DPgvulv4e5KLE1ZGqYS61g== ";
};
zone "1.168.192.in-addr.arpa" {
type master;
file "master/1.168.192.in-addr.arpa";
allow-update {key update.1.168.192.in-addr.arpa.;};
;
i then stopped named and restart...
then i issued the command admin@root# nsupdate -d -k /usr/sbin Kmydns.+157+55558.private
i typed update add customer2.mydns.com 86400 A 192.168.1.1
then typed send.
however, i got this error message :
;; TSIG PSEUDOSECTION:
mydns.com. 0 ANY TSIG hmac-md5.sig-alg.reg.int. 1224739169 300 16 VkNx6gEY6PobdUcAwu8r3g== 29090 NOERROR 0
; TSIG error with server: tsig indicates error
Reply from update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOTAUTH, id: 29090
;; flags: qr ra ; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1
;; TSIG PSEUDOSECTION:
mydns.com. 0 ANY TSIG hmac-md5.sig-alg.reg.int. 1224739169 300 0 29090 BADKEY 0
Is there anything i have missed?
please help
Audre