DDNS /var/log/messages BAD KEY

Nov 19 11:43:57 tssrv02 dhcpd: if IN A testclnt.ts-management.ch domain doesn't exist add 10800 IN A testclnt.ts-management.ch 10.4.4.200 add 10800 IN TXT testclnt.ts-management.ch "314d9f82af6cea2d5ca5fc5e761fa802d7": bad DNS key.

#
# Subnet:	10.4.4.0
# Netmask:	255.255.255.0
# Purpose:	
#

# include "etc/rndc.key";

key ddnsupdater {
	algorithm hmac-md5;
	secret "test";
}

zone ts-management.ch {
	key ddnsupdater;
}

ddns-updates on;
ddns-update-style interim;
ddns-domainname "ts-management.ch";  


subnet 10.4.4.0 netmask 255.255.255.0 {
	### Configuration sent to the DHCP client ###
	# Gateway
	option routers			10.4.4.254;
	option subnet-mask		255.255.255.0;

	# DNS
	option domain-name		"ts-management.ch";
	option domain-name-servers	10.4.4.25;

	# Windows-specific stuff
	option ntp-servers		198.82.162.213, 198.82.161.227;
	option netbios-name-servers	198.82.162.243, 198.82.162.242;
	option netbios-node-type 2;	# Change at your own risk

	# Misc
	option time-offset		-18000; # Eastern Standard Time


	### What are we doing to serve? ###
	range 10.4.4.50 10.4.4.200;
	default-lease-time 21600;
	max-lease-time 43200;

	deny bootp;	# Don't step on dogwood.ee.vt.edu's boot server
			# Dogwood is the print server and configures the
			# WSLab's HP JetDirect printers on our local
			# ethernet segment.


	### Fixed IP addresses inside subnet to follow ###
	# No fixed IP addresses in this subnet
}

options {
	directory "/var/named";
	/*
	 * If there is a FW between you and nameservers you want
	 * to talk to, you might need to uncomment the query-source
	 * directive below. Previous versions of BIND always asked
	 * questions using port 53, but BIND 8.1 uses an unprivileged
	 * port by default.*/
	query-source address * port 53;

	/*
	 * The forwarders are the DNS servers run by our service provider;
	 * you will want to change them to match the ones provided by
	 * your ISP.*/
	forwarders {
		195.186.4.111;
		195.186.1.110;
	};
};

/*
 * a chaching only nameserver config
 */
controls {
	inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};

/* The following is the dynamic DNS zone. You'll want to change it someting
 * appropriate for you matches your site. */

key ddnsupdater {
	/* Key to update ts-management.ch*/
	algorithm hmac-md5;
	secret "test";
};

zone "ts-management.ch" {
	type master;
	file "ts-management.ch";
	allow-update { key ddnsupdater; };
	# allow-update { 127/8; 10.4.4/24; };
};

zone "." {
	type hint;
	file "named.ca";
};

zone "localhost" IN {
	type master;
	file "localhost.zone";
	allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
	type master;
	file "named.local";
	allow-update { none; };
};

//include "/etc/rndc.key";