Questions tagged [nsupdate]

26 questions
5
votes
2 answers

bind: "nsupdate -l" failed with status "update failed: REFUSED"

I just switched to bind 9.9.5 dynamic DNS feature with semi-automatic management of DNSSEC entries, the whole process went good and my zone files were updated well, but now I can't update or add entries via nsupdate tool. The…
Neurotransmitter
  • 468
  • 1
  • 6
  • 17
4
votes
1 answer

request has invalid signature: TSIG rndc-test-key: tsig verify failure (BADKEY)

I am pretty much new to bind DNS and during nsupdate , i am getting BADKEY error.I have /root/named/chroot/etc/rndc.key as below :- key "rndc-test-key" { algorithm hmac-md5 ; secret…
SecureTech
  • 141
  • 1
  • 2
3
votes
1 answer

How to update one of many TXT records with nsupdate

I have a domain entry in my DNS with 3 different TXT records (1 SPF, 1 Keybase proof and a DMARC entry). I'm about to move my mail server to a new host so need to update the SPF record but I'm struggling to work out how to remove and replace just…
hardillb
  • 1,275
  • 1
  • 9
  • 19
3
votes
1 answer

How to use nsupdate to update a wildcard dns record

So for our dev environment we have a wildcard A record for each of our developers. Having different needs (vpn vs office, etc) we allow update on the dns via nsupdate. That works pretty well but I haven't found a way to update a wildcard entry via…
ROunofF
  • 131
  • 3
3
votes
1 answer

Bind9 nsupdate update-policy rule to grant _acme-challenge.**.domain.tld (all additional subdomains)

Issue I'm using letsencrypt certbot's DNS-01 challenge, but it won't issue certificates more than one subdomain level deep. named.conf # grep -A 3 ^key /etc/bind/named.conf.local key "certbot." { algorithm hmac-sha512; secret …
ki9
  • 1,169
  • 1
  • 10
  • 18
2
votes
1 answer

Revert back to manual text edits in Bind

I've tried searching for this online, but could not find an answer. We currently run a bind cluster with 1 master and 8 slaves in our infrastructure. One of the things I wanted to implement an automated way of doing updates instead of manually…
2
votes
1 answer

nsupdate answering SERVFAIL

i've been trying to set up a domain that can be updated. i'm using bind9, i've used ddns-confgen -a hmac-sha512 -k to generate my key, i've added the key in /etc/bind/keys.local key "" { algorithm hmac-sha512; …
Mazimer
  • 21
  • 1
  • 4
2
votes
0 answers

nsupdate permission on records with windows DNS

I manage to play with nsupdate and active directory DNS server. But my main problem is when I update the zone with authenticated users with this command : nsupdate -g It works, But next to the change, only the user who created the record can delete…
2
votes
2 answers

using nsupdate to delete PTR record by hostname

nsupdate allows to delete PTR record like this: delete 1.0.168.192.in-addr.arpa PTR How do I delete PTR record by hostname, something like delete host.domain.com PTR I've read man page, but it didn't help. An example would be appreciated.
Vladimir M.
  • 135
  • 2
  • 6
2
votes
1 answer

BIND DNS A Record File

I've been adding about 10 DNS A records a week for the past 2 weeks. After updating a record using nsupdate it occurred to me that maybe I should find a way to separate the DNS A records from the other records in the Zone File. Is this possible? Or…
Benjamin Jones
  • 326
  • 1
  • 9
  • 22
2
votes
1 answer

nsupdate failing on localhost - Bind 8

I have added a zone test.net via rndc locally and it is working fine. Next, I want to update it via nsupdate but locally, my zone configurations are, zone test.net {type master; file "zones-remote/masters/test.net" ;…
Anss
  • 313
  • 1
  • 4
  • 11
2
votes
2 answers

Split DNS configuration: can't update external zone from internal system using nsupdate

I have set up a single DNS server with bind9 and a split dns configuration so that all internal requests for my domain name get the internal IP address, and all requests from outside my network get the official address (which are routed through the…
nn4l
  • 1,336
  • 5
  • 22
  • 40
1
vote
1 answer

bind9 nsupdate update failed: NOTAUTH

This is my named.conf.local zone "domain.ext" { type master; file "/etc/bind/zones/domain.ext.db"; allow-update {localhost;}; }; And the domain.ext.db file: ; ; BIND data file for domain.ext ; $TTL 3h @ IN SOA …
user3690884
  • 31
  • 1
  • 3
1
vote
1 answer

Add STATIC DNS entries in Microsoft DNS using nsupdate

I am the Microsoft DNS admin at my company. The Linux admin is using nsupdate to add multiple DNS A and PTR records to Microsoft DNS for his servers. The records come in with a timestamp, and DNS scavenging removes them after our configured…
Kevin
  • 31
  • 2
1
vote
0 answers

nsupdate communicate with server failed

I have installed gnudip (a ddns server) on my server, then added 2 zones for 2 domains for it to be dynamically updated. I am using Centos 7, BIND 9 configed BIND9 as follow /etc/named.conf root:named include "/etc/named/gnudip-key"; // zone…
1
2