DNS Slave TSIG and any custom options

[cdelrey]

Using the bind package I have tried several ways to customize my configuration to include TSIG key supporting secure zone transfers. I have tried using an include statement to path to a tsig.conf file and using both global option or settings statement in the UI nothing seems to stick work. Anything I add in the UI stops the service with fatal service errors in the log. What I did get to work was to manually include the key option in named.com though that gets overwritten after a while, not sure what triggers that yet.

key zxfr-key {
        algorithm hmac-md5;
        secret "___________________";
        };

server 10.100.2.121 {
        keys { zxfr-key; };
        };

Thanks in advance