Thanks, I should of followed up with what I ended up doing to make it
work, by setting the relativize flags False (twice) it succeeds, so
instead of failing with
zone =
dns.zone.from_xfr(dns.query.xfr('nameserver.address','subdomain.example.com',keyring=tsigkr,keyname=dns_key))
it works with
zone =
dns.zone.from_xfr(dns.query.xfr('nameserver.address','subdomain.example.com',keyring=tsigkr,
keyname=dns_key, relativize=False), relativize=False)
I hope that helps someone else :)
-Ian
On Tue, Sep 16, 2008 at 8:12 AM, Bob Halley <[EMAIL PROTECTED]> wrote:
>
> On 27 Aug 2008, at 05:45, Ian Kallen wrote:
>
>> I can send updates for a subdomain configured with TSIG correctly with
>> the dnspython API but zone transfers with the same key fail. Using the
>> key to get the zone with dig works but what I expected would work with
>> the dnspython API so far hasn't. This is a simple distillation of
>> what I'm doing and the stacktrace that ensues. Any ideas?
>>
>> import dns.query
>> import dns.tsigkeyring
>> import dns.zone
>> dns_key = 'subdomain.example.com'
>
> Sorry about the delay in replying; I was on holiday.
>
> I think the problem is that your keyname is a subdomain of the zone you're
> transferring, and is erroneously getting relativized by _get_section().
> This means that it cannot find the key in your keychain, and thus you get
> the UnknownTSIGKey exception.
>
> I'll fix the bug, but in the meantime you might want to try a keyname that
> isn't in a subdomain of the zone (this works for me).
>
> /Bob
>
>
_______________________________________________
dnspython-users mailing list
[email protected]
http://howl.play-bow.org/mailman/listinfo.cgi/dnspython-users
