10 More Discussions You Might Find Interesting
1. UNIX for Beginners Questions & Answers
Can you add multiple domains to a nameserver without creating a new IP address? I have one IP address on my machine and have configured forward and reverse zone files. Names are resolving fine.
I know I can add another domain to the named.conf file and create new forward and reverse files. what... (2 Replies)
Discussion started by: LinuxGirl
2 Replies
2. UNIX for Advanced & Expert Users
Hi All
I need to do bind of exiting filesystem to new storage allocated
mount --bind /prod/OpenCSS /var/lib/test
echo "/prod/OpenCSS /var/lib/pgsql bind bind 0 0" >> /etc/fstab
will this command just work ? (2 Replies)
Discussion started by: anil529
2 Replies
3. UNIX for Dummies Questions & Answers
Version: Oracle Linux 6.6
I am trying to set up DNS for forward and reverse lookups. I am new to BIND package.
I have installed the following packages. bind (includes DNS server, named)
bind-utils (utilities for querying DNS servers about host information)
bind-libs (libraries... (0 Replies)
Discussion started by: kraljic
0 Replies
4. UNIX for Dummies Questions & Answers
When you get the message can't bind to ip already in use.
is there a command to search to see everything that is using that IP?
I've already check the host and hostname files (2 Replies)
Discussion started by: mchelle_99
2 Replies
5. Red Hat
I have problems with a simple BIND configuration in CentOS. I have a static public IP 1.1.1.1 and I recently bought a domain name gigi.com. I just want that gigi.com points to 1.1.1.1 (Apache Web Server).
This is how my named.conf file looks:
options {
directory "/var/named";
};
... (0 Replies)
Discussion started by: pasadia
0 Replies
6. UNIX for Dummies Questions & Answers
I read it create hard link but I want to be sure,
what does this command do exactly?
Thank in advance. (1 Reply)
Discussion started by: programAngel
1 Replies
7. Solaris
My environmnet : solaris 10 u 7 sparc
To configure DNS bind use Ldap as zone record database, I use bind 9.7.0 and sun directory 5.2
I do follow http://imil.net/docs/Configuring_DNS_zones_with_LDAP.txt
and stuck at make install
Error from bind log "database: error: unsupported database... (0 Replies)
Discussion started by: tien86
0 Replies
8. AIX
I am attempting to set up bind on an AIX 5.3 machine. I ahve created a named.conf, db.cache (for root domain and hint file) and a db.domainname file for the host entries. However, when I set my pc to use the AIX box as it's dns server, I can not resolve names. Is there anything obvious maybe I... (0 Replies)
Discussion started by: zuessh
0 Replies
9. Cybersecurity
How do I find out my current version of BIND?
Dhall1973:D (1 Reply)
Discussion started by: dhall1973
1 Replies
10. IP Networking
Hello. I am havig problems with this program. It is a server supposed to get 2 integers from client, calculate a sum and send result back to client. I am getting a bind() error when attempting to execute it. Any help appreciated
#include <stdio.h>
#include <sys/types.h>
#include... (2 Replies)
Discussion started by: Virtuosso
2 Replies
ISC-HMAC-FIXUP(8) BIND9 ISC-HMAC-FIXUP(8)
NAME
isc-hmac-fixup - fixes HMAC keys generated by older versions of BIND
SYNOPSIS
isc-hmac-fixup {algorithm} {secret}
DESCRIPTION
Versions of BIND 9 up to and including BIND 9.6 had a bug causing HMAC-SHA* TSIG keys which were longer than the digest length of the hash
algorithm (i.e., SHA1 keys longer than 160 bits, SHA256 keys longer than 256 bits, etc) to be used incorrectly, generating a message
authentication code that was incompatible with other DNS implementations.
This bug has been fixed in BIND 9.7. However, the fix may cause incompatibility between older and newer versions of BIND, when using long
keys. isc-hmac-fixup modifies those keys to restore compatibility.
To modify a key, run isc-hmac-fixup and specify the key's algorithm and secret on the command line. If the secret is longer than the digest
length of the algorithm (64 bytes for SHA1 through SHA256, or 128 bytes for SHA384 and SHA512), then a new secret will be generated
consisting of a hash digest of the old secret. (If the secret did not require conversion, then it will be printed without modification.)
SECURITY CONSIDERATIONS
Secrets that have been converted by isc-hmac-fixup are shortened, but as this is how the HMAC protocol works in operation anyway, it does
not affect security. RFC 2104 notes, "Keys longer than [the digest length] are acceptable but the extra length would not significantly
increase the function strength."
SEE ALSO
BIND 9 Administrator Reference Manual, RFC 2104.
AUTHOR
Internet Systems Consortium
COPYRIGHT
Copyright (C) 2010, 2013 Internet Systems Consortium, Inc. ("ISC")
BIND9 January 5, 2010 ISC-HMAC-FIXUP(8)