I just checked our setup since it uses Windows DNS also. It looks like our main domain is set to secure updates only, and i can't add anything to that. The internal domain which is where I spin up servers allows non-secure updates. The Windows tech says that if you can join the machine to the domain, he can give it permissions, but not sure how you can do that from the IBM i. I have some of my linux boxes joined, but I use special software for that.

On Mon, 2020-01-06 at 19:19 +0000, Rob Berendt wrote:

Where do you set that on a Windows based DNS?


Rob Berendt

--

IBM Certified System Administrator - IBM i 6.1

Group Dekko

Dept 1600

Mail to: 2505 Dekko Drive

Garrett, IN 46738

Ship to: Dock 108

6928N 400E

Kendallville, IN 46755

<http://www.dekko.com>

http://www.dekko.com




-----Original Message-----

From: MIDRANGE-L <

<mailto:midrange-l-bounces@xxxxxxxxxxxxxxxxxx>

midrange-l-bounces@xxxxxxxxxxxxxxxxxx

On Behalf Of DrFranken

Sent: Monday, January 6, 2020 2:13 PM

To: Midrange Systems Technical Discussion <

<mailto:midrange-l@xxxxxxxxxxxxxxxxxx>

midrange-l@xxxxxxxxxxxxxxxxxx



Subject: Re: Using the NSUPDATE command


CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.



Is the IP address you are coming from authorized to do updates on the

target DNS server? That is part of the security within bind.



- Larry "DrFranken" Bolhuis


<http://www.Frankeni.com>

www.Frankeni.com


<http://www.iDevCloud.com>

www.iDevCloud.com

- Personal Development IBM i timeshare service.

<http://www.iInTheCloud.com>

www.iInTheCloud.com

- Commercial IBM i Cloud Hosting.


On 1/6/2020 1:59 PM, Rob Berendt wrote:

Ok, how do I get "authorized"? I didn't see a userid/password keyword.

I am trying this:

NSUPDATE

server gdsdns.dekko-1

zone corp.dekko.com

update add testdns.corp.dekko.com 86400 A 10.10.7.254

send

> > > > update failed: NOTAUTH

<https://linux.die.net/man/8/nsupdate>

https://linux.die.net/man/8/nsupdate



I assume that it has something to do with generating a keyfile but I have no clue on how to go about doing that.


Rob Berendt


--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list

To post a message email:

<mailto:MIDRANGE-L@xxxxxxxxxxxxxxxxxx>

MIDRANGE-L@xxxxxxxxxxxxxxxxxx


To subscribe, unsubscribe, or change list options,

visit:

<https://lists.midrange.com/mailman/listinfo/midrange-l>

https://lists.midrange.com/mailman/listinfo/midrange-l


or email:

<mailto:MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx>

MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx


Before posting, please take a moment to review the archives

at

<https://archive.midrange.com/midrange-l>

https://archive.midrange.com/midrange-l

.


Please contact

<mailto:support@xxxxxxxxxxxx>

support@xxxxxxxxxxxx

for any subscription related questions.


Help support midrange.com by shopping at amazon.com with our affiliate link:

<https://amazon.midrange.com>

https://amazon.midrange.com




[https://www.medtronsoftware.com/img/MedtronMinilogo.bmp] Kevin Bucknum
Senior Programmer Analyst
MEDDATA / MEDTRON
120 Innwood Drive
Covington LA 70433
Local: 985-893-2550
Toll Free: 877-893-2550
https://www.medtronsoftware.com



CONFIDENTIALITY NOTICE

This document and any accompanying this email transmission contain confidential information, belonging to the sender that is legally privileged. This information is intended only for the use of the individual or entity named above. The authorized recipient of this information is prohibited from disclosing this information to any other party and is required to destroy the information after its stated need has been fulfilled. If you are not the intended recipient, or the employee of agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or action taken in reliance on the contents of these documents is STRICTLY PROHIBITED. If you have received this email in error, please notify the sender immediately to arrange for return or destruction of these documents.

As an Amazon Associate we earn from qualifying purchases.

This thread ...

Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2022 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.