• [^] # Re: dns...dnssec

    Posté par . En réponse au message DNS DHCP. Évalué à 1.

    en mettant des log plus verbeux sur le bind (192.168.1.3) :

    # log zone
    logging {
    channel update_debug {
    file "/var/log/update_debug.log" versions 3 size 100k;
    severity debug 3;
    print-category yes;
    print-severity yes;
    print-time yes;
    };
    channel security_info {
    file "/var/log/securite_debug.log" versions 3 size 100k;
    severity info;
    print-category yes;
    print-severity yes;
    print-time yes;
    };

    channel queries_info {
    file "/var/log/queries_debug.log" versions 3 size 1m;
    severity debug 1;
    print-category yes;
    print-severity yes;
    print-time yes;
    };

    channel lame_info {
    file "/var/log/lame_debug.log" versions 3 size 100k;
    severity info;
    print-category yes;
    print-severity yes;
    print-time yes;
    };

    category update { update_debug; };
    category security { security_info; };
    category queries { queries_info; };
    category lame-servers { lame_info; };
    };





    mon fichier securite_debug.log me donne les pistes!!!!


    06-May-2010 11:46:36.741 security: error: client 192.168.16.4#54579: request has invalid signature: TSIG dhcpupdate: tsig verify failure (BA
    DKEY)


    je verrai ça lundi! merci pour votre aide en tous les cas!!