Menu

#4966 BIND Zone options breaking masters field when TSIG key is used.

1.840
closed-fixed
nobody
5
2017-06-02
2017-06-01
Chuck Rock
No

Running Webmin 1.840 on CentOS Linux 6.9 and accessing with Chrome browser Version 58.0.3029.110 (64-bit)

I use BIND with views and TSIG keys. I was not able to configure a slave zone option to use a key for transfer. When I enter in the key syntax in Webmin, it separates each word on a separate line with a ; entry terminator.

This would be fine if I were entering an IP address, but the key syntax requires - IP key <key-name>; on one line or at least with only one ; at the end.

This is the link for the edit zone options I get.

https://webmin.mydomain.net:10000/bind8/edit_soptions.cgi?zone=domain.com&view=16

When I enter 10.10.10.10 key external in the first text block "Master servers" and save it, the line is broken into each word on one line.

The zone record in named.conf should look like this:

    zone "domain.com" {
            type slave;
            masters {
                    10.10.10.10 key external;
                    };
            file "/var/named/slaves/domain.com.external.db";
            };

After I use Webmin to edit though, the line is created like this and fails reconfig.

    zone "domain.com" {
            type slave;
            masters {
                    10.10.10.10; 
                    key; 
                    external;
                    };
            file "/var/named/slaves/domain.com.external.db";
            };

Here is the link to the BIND documentation showing the syntax.

http://www.zytrax.com/books/dns/ch7/zone.html#masters

and their example...

zone "example.com" in {
type slave;
file "slave/example.com";
masters port 1127 {192.168.2.7; 10.2.3.15 key zt-key; 2001:db8:0:1::15 port 1128;};
};

Thanks,
Chuck

Discussion

  • Jamie Cameron

    Jamie Cameron - 2017-06-02
    • status: open --> closed-fixed
     
  • Jamie Cameron

    Jamie Cameron - 2017-06-02

    Thansk for pointing this out - Webmin wasn't dealing properly with the case where a key can be specific for master IPs for a slave zone. This will be fixed in the next release.

     

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.