Algorithm compatibility between BIND 9.6.2 and 9.16
Hello, I am new to BIND installation and configuration. We have been using a set of BIND 9.6.2 servers (one is master & other one is slave) running on Fedora Core 10 with algorithm as 'hmac-md5' for transferring zones and other DNS related data between Master-Slave. These BIND 9.6.2 server set was installed and configured by my predecessors for the domain 'example.com'(let us say) Our domain got changed recently to 'example.in' and and i setup newly released BIND 9.16 on CentOS 7.6 for this domain as authoritative NS and is working perfectly without any issues. For somtime we would like maintain both the domains 'example.com' & 'example.in' and planning to configure 'example.com' zone as slave in the new 9.16 server. I would like to know the support of algorithm 'hmac-md5' in the new release of BIND 9.16 for making the zone tranfer 'example.com' between the old master and new slave. If this algorithm is not supported, please let me know if any work around is possible to make the new BIND 9.16 as slave to 9.6 Any help is greatly appreciated Thanks in advance -- Regards, पं. विष्णु शंकर P. Vishnu Sankar टीम लीडर Team Leader सी-डॉट C-DOT इलैक्ट्रॉनिक्स सिटी फेज़ I Electronics City Phase I होसूर रोड बेंगलूरुHosur Road Bengaluru – 560100 फोन Ph 91 80 25119466 -- Disclaimer : This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. The sender does not accept liability for any errors or omissions in the contents of this message, which arise as a result. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Algorithm compatibility between BIND 9.6.2 and 9.16
On 05/08/2020 10:43, pvs wrote: Hello Vishnu, [snip] I would like to know the support of algorithm 'hmac-md5' in the new release of BIND 9.16 for making the zone tranfer 'example.com' between the old master and new slave. Hello Vishnu, I urge you to read the man page of "tsig-keygen". You will find the answer in there. Regards, Anand Buddhdev ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Algorithm compatibility between BIND 9.6.2 and 9.16
Let me check. Thanks Anand. On 05-08-2020 15:14, Anand Buddhdev wrote: On 05/08/2020 10:43, pvs wrote: Hello Vishnu, [snip] I would like to know the support of algorithm 'hmac-md5' in the new release of BIND 9.16 for making the zone tranfer 'example.com' between the old master and new slave. Hello Vishnu, I urge you to read the man page of "tsig-keygen". You will find the answer in there. Regards, Anand Buddhdev -- Regards, पं. विष्णु शंकर P. Vishnu Sankar टीम लीडर Team Leader सी-डॉट C-DOT इलैक्ट्रॉनिक्स सिटी फेज़ I Electronics City Phase I होसूर रोड बेंगलूरुHosur Road Bengaluru – 560100 फोन Ph 91 80 25119466 -- Disclaimer : This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. The sender does not accept liability for any errors or omissions in the contents of this message, which arise as a result. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Algorithm compatibility between BIND 9.6.2 and 9.16
Yes Anand, hmac-md5 is supported. Thanks On 05-08-2020 15:47, pvs wrote: Let me check. Thanks Anand. On 05-08-2020 15:14, Anand Buddhdev wrote: On 05/08/2020 10:43, pvs wrote: Hello Vishnu, [snip] I would like to know the support of algorithm 'hmac-md5' in the new release of BIND 9.16 for making the zone tranfer 'example.com' between the old master and new slave. Hello Vishnu, I urge you to read the man page of "tsig-keygen". You will find the answer in there. Regards, Anand Buddhdev -- Regards, पं. विष्णु शंकर P. Vishnu Sankar टीम लीडर Team Leader सी-डॉट C-DOT इलैक्ट्रॉनिक्स सिटी फेज़ I Electronics City Phase I होसूर रोड बेंगलूरुHosur Road Bengaluru – 560100 फोन Ph 91 80 25119466 -- Disclaimer : This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. The sender does not accept liability for any errors or omissions in the contents of this message, which arise as a result. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Cannot get nsupdate to work (for letsencrypt acme.sh client)
On Wed, 5 Aug 2020, Mark Andrews wrote: If I use the example zone on that page *no* errors are reported. If I modify restarchitect.com to have a A record at _acme-challenge.restarchitect.com then errors will be reported. I certainly did get an error originally. I would not have found this page if I didn't have the error message to search for. After reviewing my command history I have concluded that it is possible that I originally tested with an A, not TXT record, thusa causing the error. Then I switched it, unaware of the difference to check-names. Thanks for the in-depth 'proof'. I have removed check-names now and it works as it should. Brett ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Cannot get nsupdate to work (for letsencrypt acme.sh client)
Unfortunately comments section on that page doesn’t work. You press preview and you get a error response back. > On 6 Aug 2020, at 02:21, Brett Delmage wrote: > > On Wed, 5 Aug 2020, Mark Andrews wrote: > >> If I use the example zone on that page *no* errors are reported. >> If I modify restarchitect.com to have a A record at >> _acme-challenge.restarchitect.com then errors will be reported. > > I certainly did get an error originally. I would not have found this page if > I didn't have the error message to search for. > > After reviewing my command history I have concluded that it is possible that > I originally tested with an A, not TXT record, thusa causing the error. Then > I switched it, unaware of the difference to check-names. > > Thanks for the in-depth 'proof'. I have removed check-names now and it > works as it should. > > Brett > > -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Invalid class in dns query
In article you write: >Hi all, > >Looking for a temporary work around, while an issue gets resolved. I have a >DNS query coming in with an invalid class requested (65 or 0x41). The only classes ever assigned were 1, 2, 3, 4, and pseudo-classes 254 and 255. What is class 65 supposed to be? Why would anything that wasn't totally broken query for it? R's, John ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Invalid class in dns query
> On 6 Aug 2020, at 10:11, John Levine wrote: > > In article you write: >> Hi all, >> >> Looking for a temporary work around, while an issue gets resolved. I have a >> DNS query coming in with an invalid class requested (65 or 0x41). > > The only classes ever assigned were 1, 2, 3, 4, and pseudo-classes 254 and > 255. > > What is class 65 supposed to be? Why would anything that wasn't totally > broken query for it? It was coming from a broken device in pre-deployment testing. My advice to Trevor, when I rang him, was send it back to the manufacture to be fixed and there is no workaround for this fault in named. Mark > R's, > John > > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
