[Opendnssec-user] ods2 AXFR request to nameserver fails , reports "bad packet: ... received error code NOTAUTH", but no traffic (tcpdump) seen ?

[PGNet Dev]

On 12/27/2016 07:04 AM, Berry A.W. van Halderen wrote:

>> cat addns.xml
>   <?xml version="1.0" encoding="UTF-8"?>
>   <Adapter>
>     <DNS>
> 	<TSIG>
> 		<Name>ods-key</Name>
> 		<Algorithm>hmac-sha256</Algorithm>
> 		<Secret>xxx...xxx</Secret>
> 	</TSIG>
> 	<Outbound>
> 		<ProvideTransfer>
> 			<Peer>
> 				<Prefix>10.2.2.53</Prefix>
> 				<Key>ods-key</Key>
> 			</Peer>
> 		</ProvideTransfer>
> 		<Notify>
> 			<Remote>
> 				<Address>10.2.2.53</Address>
> 				<Port>53</Port>
> 			</Remote>
> 		</Notify>
> 	</Outbound>
> 	...
>     </DNS>
>   </Adapter>
>
> The Remote section here is missing the Key-reference.

whether it's

	<Remote>
		<Address>10.2.2.53</Address>
		<Port>53</Port>
	</Remote>

or

	<Remote>
		<Address>10.2.2.53</Address>
		<Port>53</Port>
		<Key>ods-key</Key>
	</Remote>

I see the same udp failure/error in the --out-type==DNS case.

That the error logging is not reporting what the problem is (per the bug 
report) is certainly complicating the effort.