Re: botched KSK rollover

https://bugs.isc.org/Public/Bug/Display.html?id=45806 Thank you for reporting! -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND rejecting key to update a zone

as confidential. Also feel free to contact me off-list if that suits you best. Thanks, -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@li

Re: BIND rejecting key to update a zone

he debug level to at least 3, retry, and paste the log messages generated? Please also feel free to open an issue at https://gitlab.isc.org. -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe

Re: round-robin bug in 9.12.1-P2 for rDNS?

> Thoughts? This sounds a bit like #336 [1], but you mentioned rrset-order being explicitly set in your configuration, so it might be something else. If you can still reproduce this with current master (or with current v9_12 branch), please open a new GitLab issue. Thanks! [1] https://gitlab.isc.or

Re: Local Slave copy of root zone

is validated. This might change in the future, but since the root zone is the primary use case and a default trust anchor for the root zone is installed implicitly, I would not hold my breath for it. -- Best regards, Michał Kępień ___ Please visit http

Re: round-robin bug in 9.12.1-P2 for rDNS?

ion which allows reproducing this behavior. Thanks! -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Operational Notification: Extremely large zone transfers can result in corrupted journal files or server process termination

ns, or billions? Hopefully this will shed some light on the matter: https://gitlab.isc.org/isc-projects/bind9/issues/339#note_12805 -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe fro

Re: configure option --disable-crypto-rand unsupported in 9.12.2?

g error which has now been fixed in the v9_12 branch, which means it will land in 9.12.3: https://gitlab.isc.org/isc-projects/bind9/merge_requests/529 Sorry about the trouble! -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org

Re: bind-9.12.2-P2 fails to compile with baffling undefined symbol issues

https://gitlab.isc.org/isc-projects/bind9/blob/master/PLATFORMS.md If you have any comments about it, please open a GitLab issue. -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this l

Re: Understanding TTL in "rndc dumpdb"-output

tale answers is enabled by default). The TTLs you are seeing in the cache dump essentially indicate how much longer any given record will be kept in the cache database. The serve-stale "offset" is indicated in a comment near the top of the dump; I am fairly sure it wi

Re: bind-9.12.2-P2 fails to compile with baffling undefined symbol issues

ic. Note that atomic operations support is mandatory as of BIND 9.13.3. [1] https://docs.oracle.com/cd/E60778_01/html/E60745/gqico.html -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscr

Re: Understanding TTL in "rndc dumpdb"-output

heless the TTL in > the form of "serve-stale" is shown (even if the serve-stale-status = off)? Yes, this is normal. Once again (please take another look at the parenthesized part of my previous response), max-stale-ttl is separate from stale-answer

Re: Enforcing minimum TTL...

hat there were other resolvers that could do this. But my > preference is to do it with BIND if possible. You might want to keep an eye on: https://gitlab.isc.org/isc-projects/bind9/issues/613 -- Best regards, Michał Kępień ___ Please visit https://li

Re: bind-9-packages: RPS and both '--enable-static' and '--disable-static'?

ompile-time options fairly convenient. > Also, when running "named -V", I see both '--enable-static' and > '--disable-static' in the output. I have no idea if this is > sensible or not but it sure looks a little funny: Thank you for catching this, we will fix it. -- B

Re: bind 9.12 rpm dependency problem

ld solve problems like this for good, but unfortunately I am unable to provide you with any estimates as to when exactly that might happen, sorry. Hope this helps, -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: isc-bind-esv Repository - "yum update" doing undesirable things!

is seamless. -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: isc-bind-esv Repository - "yum update" doing undesirable things!

helps! [1]: unless you rebuild them using "--without scl", of course -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: A little baffled by bind 9.14.2 wanting some special python?

s/1964 Apologies about the confusion. -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinf

Re: bug in ifiter_getifaddrs.c cannot find include file: ??

during the 9.13 development cycle: https://gitlab.isc.org/isc-projects/bind9/merge_requests/668 Thus, BIND 9.14+ will not compile on Solaris 10, as indicated in the PLATFORMS.md file. BIND 9.11 will. Both work on Solaris 11. -- Best regards, Michał

Re: isc-bind-esv Repository - "yum update" doing undesirable things!

"--without scl" works fine. [2] See the repositories at: https://gitlab.isc.org/isc-packages/rpms -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bin

Re: rndc status command hangs in bind 9.14.2

ot;named -V" output? What is your build process? If you are still hitting this, please open a bug report on gitlab.isc.org, providing the answers to the questions above and any other information that may be helpful. -- Best regards, Michał Kępień

Re: isc-bind-esv Repository - "yum update" doing undesirable things!

] https://www.softwarecollections.org/ [3] https://lists.isc.org/pipermail/bind-users/2019-January/101277.html, for example -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

Re: isc-bind-esv Repository - "yum update" doing undesirable things!

duced from it, once you add a Copr repository to your yum configuration, you can do e.g. this: $ yumdownloader --source isc-bind-bind Hope this helps, [1]: https://access.redhat.com/solutions/527703 [2]: https://www.softwarecollections.org/en/docs/guide/#sect-Enabling

Re: Preferred log location with ISC copr package

ing purposes: /var/opt/isc/isc-bind/named/data If you want to make named write logs to any other directory, you have to set up that directory yourself. -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to u

Re: isc-bind-esv Repository - "yum update" doing undesirable things!

his approach is that it would be another breaking change, though obviously if this would result in a cleaner long-term solution, then now is the time to bite the bullet. I will report back to announce what we are going to do. Thanks again for the feedback. -- Best regards, M

Re: isc-bind-esv Repository - "yum update" doing undesirable things!

FWIW, currently published SRPMs can be rebuilt using "--without scl". -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.

Re: isc-bind-esv Repository - "yum update" doing undesirable things!

k BIND packages installed. -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Preferred log location with ISC copr package

ur best to ensure our packages do not trash anything in an irreversible manner. Thus, this should not be an issue. You can try it out yourself, e.g. by installing BIND from the isc/bind Copr first, then adding the isc/bind-dev Copr as well and finally running "yum update"

Re: Log rolling stopped working in 9.11.12 ?

434d4d8a6e436e0943cfc2deac2f1a07fe3136b5/isc-bind.spec#L63 [2] https://www.softwarecollections.org/en/docs/guide/#bh-Example_of_the_Meta_Package -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubsc

Re: 9.11 -> 9.16 via COPR

rform the upgrade and it should be fairly seamless (though prior testing is of course strongly recommended when updating across major versions in a production environment). The most recent BIND release in the "bind-esv" repository should never be newer than the most recen

Re: RPZ wildcard domain passthru not effective in BIND 9.11.21

, try this one: https://gitlab.isc.org/isc-projects/bind9/-/commit/33ae88f08dabea846aee3be3af8a515fd9774ee1.diff Sorry about the trouble! -- Best regards, Michał Kępień ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe

Re: "doth" test failing in 9.18.3

o open another GitLab issue, attaching the entire contents of bin/tests/system/doth/ after the "doth" system test fails. We could then make sure it is not a different problem. Thanks, -- Best regards, Michał Kępień -- Visit https://lists.isc.org/mailman/listinfo/bind-users to u

Re: bind v9_18_x compile

2fe4bc647f12398aadacd8dcf59f15 TL;DR: what we did in the first Automake-based build system was confusing and not perfect, so we replaced it with something that is less confusing, yet still not perfect. -- Best regards, Michał Kępień -- Visit https://lists.isc.org/mailman/listinfo/bind-

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

aware that if the SELinux contexts are not set up by the metapackage, you may run into other similar issues in the future. [1] https://copr.fedorainfracloud.org/coprs/isc/bind/ [2] https://gitlab.isc.org/isc-packages/rpms/isc-bind/-/blob/7b525a31c2bd9b51c10b2ed2aca8d5244221f359/isc-bind.spec#L77 -- B

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

nding pages" of all BIND 9 Copr repositories. > Thanks a lot. Glad I could help. Thank you for your feedback. -- Best regards, Michał Kępień -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid su

Re: Attempting to configure an ISC BIND repository on Red Hat Linux 7.9

om your vantage point is dysfunctional in some way while others are working just fine. -- Best regards, Michał Kępień -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us

Re: bind 9.16.28 vrs. 9.18.2 (on freebsd) resolving foryoudecor.com

1. :gl:`#2249` If you need a workaround for this particular domain, use the "server" clause in named.conf to disable EDNS for its authoritative servers. [1] https://bind9.readthedocs.io/en/v9_18_0/notes.html#notes-for-bind-9-18-0 -- Best regards, Michał Kępień -- Visit https://lists.isc.org/mai

Re: [URL Verdict: Neutral][Non-DoD Source] Re: Attempting to configure an ISC BIND repository on Red Hat Linux 7.9

figure out what that "something" is yourself, though, because it looks like an environment-specific issue to me at this point and not a problem with Copr itself. Good luck! -- Best regards, Michał Kępień -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from

Re: BIND >= 9.18, jemalloc and EL7

/bind/epel-8-x86_64/04742380-isc-bind-bind/builder-live.log.gz -- Best regards, Michał Kępień -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc

Re: Question about ISC BIND COPR repositories for 9.16->9.18 ESV transition

pes for all our RPMs are publicly available [1], plus every Copr build results in the creation of an SRPM that can be reused/tweaked to produce RPMs differently in case anyone needs that. [1] https://gitlab.isc.org/isc-packages/rpms/ -- Best regards, Michał Kępień -- Visit https://lists

Re: Question about ISC BIND COPR repositories for 9.16->9.18 ESV transition

nd/builds/ - https://copr.fedorainfracloud.org/coprs/isc/bind-dev/builds/ Hope this helps, -- Best regards, Michał Kępień -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Cont

Re: Question about ISC BIND COPR repositories for 9.16->9.18 ESV transition

We have just upgraded the "bind-esv" repository from BIND 9.16.50 to BIND 9.18.27, i.e. the same version as in the "bind" repository. We will try to keep everyone informed about further major version upgrades in our package repositories in the coming months. -- Best re

Re: New BIND releases are available: 9.18.28, 9.20.0

epel-7-x86_64 builds in our Copr repositories to prevent confusion in the future. -- Best regards, Michał Kępień -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https: