Package: bind9
Version: 1:9.2.4-1
Severity: normal

Hi,

We're running a configuration with views, for added security:

  view "recursion" {
     /* recursive stuff here */
  };
  view "authoritative" {
     /* authoritative stuff here */
     key DHCP_UPDATER {
         /* key */
     };
     zone "foo.bar" {
         type master;
         allow-update { key DHCP_UPDATER; };
         zone "/etc/bind/pz/foo.bar";
     };
  };

nsupdate (both over TCP and UDP) against the host gives NOERROR -- but
the changes are never activated. If I comment out the all the view stuff
and run in a flat space, it updates just fine. I've also verified that
it's the _update_ that goes wrong, not the query in itself -- if I
comment out the views, do nsupdate, restart with the views again and
query, they're there.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.14.3
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)

Versions of packages bind9 depends on:
ii  adduser                       3.80       Add and remove users and groups
ii  libbind9-0                    1:9.3.2-2  BIND9 Shared Library used by BIND
ii  libc6                         2.3.5-12   GNU C Library: Shared libraries an
ii  libdns21                      1:9.3.2-2  DNS Shared Library used by BIND
ii  libisc11                      1:9.3.2-2  ISC Shared Library used by BIND
ii  libisccc0                     1:9.3.2-2  Command Channel Library used by BI
ii  libisccfg1                    1:9.3.2-2  Config File Handling Library used 
ii  liblwres9                     1:9.3.2-2  Lightweight Resolver Library used 
ii  libssl0.9.8                   0.9.8a-6   SSL shared libraries
ii  lsb-base                      3.0-14     Linux Standard Base 3.0 init scrip
ii  netbase                       4.24       Basic TCP/IP networking system

bind9 recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to