Re: Debugging TSIG signed nsupdate problems

2024-05-24 Thread Erik Edwards via bind-users
algorithm hmac-sha256; named-checkconf -p shows the key with the matching name, algo, and secret. When I mis-configure, change, or typo the secret it returns "BAD SECRET" The error I'm seeing is "REFUSED" on a config that worked until the upgrade. It worked on F36-F39, upgrades were seamless.

Re: Debugging TSIG signed nsupdate problems

2024-05-24 Thread John Thurston
It doesn't answer your original question, but I suggest looking at the 'algorithm' of that key. Might it be a hmac-md5 ? If you 'named-conf -px'   does it appear in the list of keys? -- Do things because you should, not just because you can. John Thurston907-465-8591

Debugging TSIG signed nsupdate problems

2024-05-24 Thread Erik Edwards via bind-users
How can I set debug level log for update events? I've tried "rndc trace 99" which gives *lots* of information expect for UPDATE REFUSED issues even thought the channel is set to dynamic severity. Is there a different way to get named to generate debug level logs for UPDATE events? I'm