Subject: bind -noesw tsig
To: None <current-users@netbsd.org>
From: Christopher Vance <vance@aurema.com>
List: current-users
Date: 11/09/2001 15:40:19
I am running NetBSD 1.5Y/i386 on one machine and FreeBSD 4.4/i386 on
another.  Both have BIND 8.2.4 as their standard BIND, but on NetBSD
it's -NOESW, while on FreeBSD it's not.

I am attempting to set up keys for use with TSIG, and NetBSD keeps
telling me the key is unknown, while FreeBSD doesn't, for almost the
same named.conf.  Is this due to -NOESW?  (It appears from the
Makefile that this is set unconditionally.)  Should I install one of
the BIND versions from pkgsrc?  Would they have the same setting?  Did
I miss something?

My named.conf file at each end is pretty much as follows (secret and
some zones omitted):

| options {
|         directory "/var/namedb";
|         dump-file "named_dump.db";
|         auth-nxdomain no;
|         notify yes;
|         query-source address * port 53;
|         allow-query { 127/8; 202.12.75/24; };
|         allow-transfer { 127/8; 202.12.75/24; };
|         allow-recursion { 127/8; 202.12.75/24; };
| };
| key tsig.nu.org. { algorithm "hmac-md5"; secret "<omitted>"; };
| server 202.12.75.85 { keys { tsig.nu.org.; }; };
| zone "." { type hint; file "ROOT"; }; 
| zone "nu.org" {
|         type slave; masters { <not shown here>; }; file "nu.org";
| };

In each case, the address on the server line is that of the other
machine.

-- 
Christopher Vance