dnspython whether to support bind view?

62 views
Skip to first unread message

hotfi...@gmail.com

unread,
May 7, 2015, 3:13:30 AM5/7/15
to dnspyt...@googlegroups.com
hello everybody

bind9 configure the bind view   

use dnspython updatezone report error   "#36092/key kall: view chinanet: update 'link263.com/IN' denied"
unable to update the kall view  don't know why don't support bind view?

if you are using chinanet is OK


For example:
bind9  named.conf

options {

        directory        "/var/named";
        port 53;
};

key "chinanet" {
        algorithm hmac-md5;
        secret "gEU9VfeM5xlLq0gLFonucc==";
};

key "kall" {
        algorithm hmac-md5;
        secret "PqTkVUNFVe3j2duyfr1Saa==";
};

view "chinanet" {
        match-clients {
                key chinanet;
                chinanet;
        };
zone "link.com" {
 type  master;
 file "ct/db.link.com";
 allow-query { any; };
 allow-update { key chinanet; };
};

};

view "all" {
        match-clients {
                key kall;
                any;
        }
zone "link.com" {
 type  master;
 file "db.link.com";
 allow-query { any; };
 allow-update { key kall; };
};
};



python script:

import dns.query
import dns.tsigkeyring
import dns.update
import sys

keyring = dns.tsigkeyring.from_text({
        'kall' : 'PKTkVUNFVe3j2duyfr1Sjg=='

})

update = dns.update.Update( 'link.com', keyring=keyring)
update.add('www',86400 ,'a',127.0.0.1)

response = dns.query.tcp(update,'192.168.5.2')
Reply all
Reply to author
Forward
0 new messages