[Pdns-users] How to configure TSIG with BIND backend

[frank+pdns at tembo.be]

Please enable, validate and test dnssec for your backend. Then use the pdnsutil command to add the tsig keys.

If that doesn't work, please share full and unedited config, so people can have a look and replicate. 

Frank



Frank Louwers
PowerDNS Certified Consultant @ Kiwazo.be <http://kiwazo.be/>

> On 17 Nov 2021, at 14:06, Fox, Michael E. <michael.fox at tamu.edu <mailto:michael.fox at tamu.edu>> wrote:
> 
> Thanks Frank,
>  
> You’re trying to troubleshoot my config.  That is *NOT* what I’m asking.  BTW, there’s nothing secret in my config.  But:
> It is in a lab and not accessible from outside (mostly because I don’t know how to secure it yet, but also because it has no useful purpose outside the lab so we keep the threat surface as small as possible)
> It is irrelevant to the question. 
>  
> Again, my question is simple:  what is the proper syntax for enabling TSIG using BIND backend on master and slave?
>  
> Once I know what I’m *supposed* to do, then if I try it and it fails, that’s the time to figure out what’s wrong.  Right now, I don’t even know the proper way to set it up.
>  
>  
> Michael E Fox
> Sr. Assoc. Director, ITEC
> Texas A&M University
> 979-862-4036 (Office)
> michael.fox at tamu.edu <mailto:michael.fox at tamu.edu>
> https://itec.tamu.edu <https://itec.tamu.edu/>
>  
> Join us for Interoperability Institute ’22:  May 2-6, 2022
> https://itec.tamu.edu/interop22/ <https://itec.tamu.edu/interop22/>
>  

Frank Louwers
PowerDNS Certified Consultant @ Kiwazo.be




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20211117/8944ec7c/attachment.htm>