<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
HI, i am studying migrating my old bind to powerdns<br>
i am currently making tests with a bind backend (because migration is easy)</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
everything that i use works well except TSIG. I indeed need some machines on my network to update dns record.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
is the TSIG feature supported with only the bind backend?</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
if yes, what's wrong in my config?</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
i have the following config:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
4.9.0-13-amd64 #1 SMP Debian 4.9.228-1 (2020-07-05) x86_64 GNU/Linux
<div>root@strongswan-lab:~# dpkg -l | grep pdns</div>
<div>ii pdns-backend-bind 4.4.0~alpha0+master.700.g573dc48f2-1pdns.stretch amd64 BIND backend for PowerDNS</div>
ii pdns-server 4.4.0~alpha0+master.700.g573dc48f2-1pdns.stretch amd64 extremely powerful and versatile nameserver<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
subset of /etc/powerdns/pdns.conf:<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
allow-notify-from=10.0.0.0/8,0.0.0.0/0,::/0
<div>allow-unsigned-notify=yes</div>
<div>include-dir=/etc/powerdns/pdns.d</div>
<div>local-port=5300</div>
<div>setgid=pdns</div>
<div>setuid=pdns</div>
<div>webserver-address=10.46.0.37</div>
webserver-allow-from=10.46.0.0/16,192.168.0.0/16,172.0.0.0/8</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
and only a file /etc/powerdns/pdns.d/bind.conf in /etc/powerdns/pdns.d<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
launch=bind
<div>bind-config=/usr/local/bind-for-powerdns/etc/named.conf</div>
<div>bind-supermaster-config=/var/lib/powerdns/supermaster.conf</div>
bind-supermaster-destdir=/var/lib/powerdns/zones.slave.d<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
/var/lib/powerdns/supermaster.conf is an empty file and <br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
/var/lib/powerdns/zones.slave.d is an empty dir</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
revelant info in is:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
key "rndc-key" {
<div> algorithm hmac-md5;</div>
<div> secret "base64secret";</div>
<div>};</div>
<div><br>
</div>
<div>zone "gcn.systems" {</div>
<div> type master;</div>
<div> file "/usr/local/bind-for-powerdns/var/cache/bind/db.gcn.systems";</div>
<div> allow-update { key rndc-key; };</div>
<div> allow-transfer { key rndc-key; };</div>
<div>};</div>
<div><br>
</div>
root@strongswan-lab:~# cat /usr/local/bind-for-powerdns/var/cache/bind/db.gcn.systems
<div>$ORIGIN .</div>
<div>$TTL 907200 ; 1 week 3 days 12 hours</div>
<div>gcn.systems IN SOA cortex.gcn-lab.fr. root.gcn.systems. (</div>
<div>440431 ; serial</div>
<div>10800 ; refresh (3 hours)</div>
<div>3600 ; retry (1 hour)</div>
<div>604800 ; expire (1 week)</div>
<div>38400 ; minimum (10 hours 40 minutes)</div>
<div>)</div>
<div>NS cortex.gcn-lab.fr.</div>
<div>$TTL 10800 ; 3 hours</div>
<div>A 217.70.184.38</div>
<div>MX 10 spool.mail.gandi.net.</div>
<div>MX 50 fb.mail.gandi.net.</div>
<div>$ORIGIN gcn.systems.</div>
<div>$TTL 300 ; 5 minutes</div>
<div>cassandra-0-azure-terraformtesting-aks A <ip_masked><br>
</div>
<div>chef-azure-terraformtesting-aks A <ip_masked><br>
</div>
<div>haproxy-0-azure-terraformtesting-aks A <ip_masked><br>
</div>
<div>haproxy-1-azure-terraformtesting-aks A <ip_masked><br>
</div>
<div>influxdb-azure-terraformtesting-aks A <ip_masked><br>
</div>
<div>kafka-0-azure-terraformtesting-aks A <ip_masked><br>
</div>
vpngw-azure-terraformtesting-aks A <ip_masked><br>
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Note: cortex.gcn-lab.fr is the actual bind nameserver i took zone file from</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks for helping</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<p>best regards<br>
</p>
<p>BENOIT Frederic</p>
</div>
</div>
</div>
</body>
</html>