Axel Rau <axel....@chaos1.de> wrote:
>
> occasionally named 9.11.3 fails to increment SOA serial like here:
>
>       file: 2018060605 dns: 2018060604

With inline signing the signed and unsigned zones have separate serial
numbers, so this is normal. If I understand inline-signing correctly, when
you only modify the unsigned zone's serial number, that is not a big
enough change to require an update to the signed version of the zone.

You can use `rndc zonestatus` to see the server's view of both serial
numbers.

You can use `rndc signing -serial` to set the serial number of the signed
zone.

You might want to set `serial-update-method` if you want something more
meaningful than an increment for each update (e.g. `date`).

Tony.
-- 
f.anthony.n.finch  <d...@dotat.at>  http://dotat.at/
champion the freedom, dignity, and well-being of individuals
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to