Re: GSS-TSIG update policy identity field

2011-05-12 Thread Juergen Dietl
Hello Mark, thanx a lot for your feedback. the rule that works at the moment for only ONE client: grant WS-YBCL150939\$\@EXAMPLE.TEST subdomain example.test. ANY; Because bind support both it should also work with: grant ws-ybcl150...@example.test subdomain example.test. ANY; right? But for

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Juergen Dietl
Hello Mark i am not that professional in bind. Normally I am a CISCO expert but now I also do the bind for 6 months. I cannot imagine why this post should help me. What do this match-type external mean? I am not aware of running any external daemon. Or was this just for the ACLs problem from

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Juergen Dietl
Hi Nicholas, thanx for your hint but unfortunately it gets also a refuse. cheers, 2011/5/11 Nicholas F Miller nicholas.mil...@colorado.edu Try: grant EXAMPLE.TEST subdomain EXAMPLE.TEST ANY; _ Nicholas Miller, ITS, University of

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Phil Mayers
On 12/05/11 09:33, Juergen Dietl wrote: Hello Mark i am not that professional in bind. Normally I am a CISCO expert but now I also do the bind for 6 months. I cannot imagine why this post should help me. It doesn't really. You should only need this: grant EXAMPLE.COM ms-self * any; What

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Juergen Dietl
Hello Phil, Hello Mark, after trying a lot the last hours I came to the same result. grant EXAMPLE.COM ms-self * any; works. All the other things for example EXAMPLE.COM krb5-self * any; etc. dont work. So I will put this rule in any zone with the relating domain. The ms-self command is not

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Mark Andrews
In message BANLkTi=f=LP2WTSEck940CvqzxL=dsi...@mail.gmail.com, Juergen Dietl writes: --20cf30549e9f7b6a2604a30ffc67 Content-Type: text/plain; charset=ISO-8859-1 Hello Mark, thanx a lot for your feedback. the rule that works at the moment for only ONE client: grant

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Juergen Dietl
2011/5/12 Mark Andrews ma...@isc.org I suggest that you look at the documentation for external and use it. Hello Mark, thanx a lot for your explanation. One last question. What do you mean with your sentence above? Do you mean that?: +++

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Mark Andrews
In message banlktincegux9+9n6n0y5t-cub8vjtg...@mail.gmail.com, Juergen Dietl writes: --90e6ba6134ba89740204a312cb5f Content-Type: text/plain; charset=ISO-8859-1 Hello Phil, Hello Mark, after trying a lot the last hours I came to the same result. grant EXAMPLE.COM ms-self * any;

Delegating subzone of a not valid domain.

2011-05-12 Thread Samuel Abreu de Paula
Hi, in my lan domain im trying to delegate subzones to others name servers, but im failing hard. Lets say domain acme: ns1.acme server, file acme.zone: $TTL604800 @ IN SOA ns1.acme. admin.acme. ( 19 ; Serial

Re: Primary Server Name Change

2011-05-12 Thread Kevin Darcy
On 5/12/2011 3:21 PM, Michelle Konzack wrote: Hello CT, Am 2011-05-12 13:09:35, hacktest Du folgendes herunter: Primary Name server bind- 9.7.3 OS- CentOS 5.6 Authoritative for 2 zones using DNSSEC This may be an obvious question but I will ask anyway.. :) I want to change the name

Once again.. :) Primary Server Name Change

2011-05-12 Thread CT
I accidentally borked the previous post.. Primary Name server bind- 9.7.3 OS- CentOS 5.6 This may be an obvious question but I will ask anyway.. :) I want to do a name change on the Primary for 2 zones using DNSSEC - zone1 - zone2 - Old name - old.zone1.com - New Name - new.zone2.com -

Re: Primary Server Name Change

2011-05-12 Thread Mark Andrews
In message 4dcc225f.8000...@obsd.us, CT writes: Primary Name server bind- 9.7.3 OS- CentOS 5.6 Authoritative for 2 zones using DNSSEC This may be an obvious question but I will ask anyway.. :) I want to change the name of the server from old.zone1.com to new.zone2.com IP