Re: how to proper include DS record on key dnssec

2011-01-14 Thread Torinthiel
Dnia 2011-01-14 03:11 fakessh @ napisał(a): >hello bind network and hello dnssec network admin. > > >thank you for answered, >I think I found a solution to my problem. >$INCLUDE directive is that I have to handle > > >example: > $INCLUDE /var/named/keys/dsset-fakessh.eu. fakessh.eu YOU

Re: rndc addzone and file name

2011-01-14 Thread Peter Andreev
2011/1/13 Alan Clegg : > On 1/13/2011 11:08 AM, Peter Andreev wrote: > >> I've executed >> rndc addzone test.test '{ type master; file "/etc/namedb/master/test.1"; };' >> >> and have got the file /etc/namedb/3bf305731dd26307.nzf: >> zone test.test { type master; file "/etc/namedb/master/test.1"; };

Re: how to proper include DS record on key dnssec

2011-01-14 Thread Marc Lampo
... > DNSKEY goes to fakessh.eu > DS goes to .eu, and I don't have any idea if registrars already permit it The .eu zone will accept the DS information (that is : registrar should inform us of the ksk or ksk's (plural)) Our system performs extra checks on DNSSEC information, trying to make sure t

Re: rndc addzone and file name

2011-01-14 Thread Kalman Feher
On 14/01/11 9:57 AM, "Peter Andreev" wrote: > 2011/1/13 Alan Clegg : >> On 1/13/2011 11:08 AM, Peter Andreev wrote: >> >>> I've executed >>> rndc addzone test.test '{ type master; file "/etc/namedb/master/test.1"; };' >>> >>> and have got the file /etc/namedb/3bf305731dd26307.nzf: >>> zone t

Re: rndc addzone and file name

2011-01-14 Thread Peter Andreev
2011/1/14 Kalman Feher : > > > > On 14/01/11 9:57 AM, "Peter Andreev" wrote: > >> 2011/1/13 Alan Clegg : >>> On 1/13/2011 11:08 AM, Peter Andreev wrote: >>> I've executed rndc addzone test.test '{ type master; file "/etc/namedb/master/test.1"; };' and have got the file /e

RT-Number?

2011-01-14 Thread Tom Schmitt
I just read the release notes from Bind 9.7.2-P3 and noticed that behind every short description of a change there is a number beginning with RT. I hope this is some kind of ticket number were more detailed information about this change could be found? My question: Were do I find these tickets?

Re: rndc addzone and file name

2011-01-14 Thread Kalman Feher
On 14/01/11 12:51 PM, "Peter Andreev" wrote: > 2011/1/14 Kalman Feher : >> >> >> >> On 14/01/11 9:57 AM, "Peter Andreev" wrote: >> >>> 2011/1/13 Alan Clegg : On 1/13/2011 11:08 AM, Peter Andreev wrote: > I've executed > rndc addzone test.test '{ type master; file "/etc/

Re: rndc addzone and file name

2011-01-14 Thread Alan Clegg
> You haven't understood. I have several includes within one default > view and I need to add zones to them. Different zones to different > includes. For me name of view doesn't matter. The zones added using "addzone" and removable using "delzone" aren't going to show up in your include files. T

Re: RT-Number?

2011-01-14 Thread Kalman Feher
On 14/01/11 1:26 PM, "Tom Schmitt" wrote: > I just read the release notes from Bind 9.7.2-P3 and noticed that behind every > short description of a change there is a number beginning with RT. > I hope this is some kind of ticket number were more detailed information about > this change could be

Re: rndc addzone and file name

2011-01-14 Thread Peter Andreev
Now I see, I really was mistaken about addzone. Kalman, Alan, thank you very much for explanation. I think, I won't break working things and continue with includes and scripts :) 2011/1/14 Alan Clegg : > >> You haven't understood. I have several includes within one default >> view and I need to ad

Re: RT-Number?

2011-01-14 Thread Evan Hunt
> I recall there being a statement on the website somewhere that the > information is not made public. I hope I'm wrong on this. You're not wrong. People who submit bug reports sometimes include confidential information, so we'e kept the bug database for BIND 9 closed. This may change in the fut

nsupdate to all servers

2011-01-14 Thread pyh
Hello, My bind servers are hosting with many zones, and many views. Due to the complication, I won't run the master/slave with TSIG keys for replication. I want to run nsupdate to all servers separately for the records update. Is this a good idea? Thanks Regards. _

Re: nsupdate to all servers

2011-01-14 Thread Lyle Giese
p...@mail.nsbeta.info wrote: > > Hello, > My bind servers are hosting with many zones, and many views. > Due to the complication, I won't run the master/slave with TSIG keys > for replication. > I want to run nsupdate to all servers separately for the records update. > Is this a good idea? Thanks >

Re: rndc addzone and file name

2011-01-14 Thread Alan Clegg
On 1/14/2011 4:06 PM, Timothe Litt wrote: >>> You can use the 'named-checkconf -p' to create a fully "expanded" >>> version of the running configuration file as needed for bug reports, etc. > > ?? Including zones added by "addzone"? How does checkconf find them? Well, it _should_ find them the s

help with rndc fail

2011-01-14 Thread pyh
Hello gurus, my rndc related commands in bind master with multi-views run fail,but in slave it's running correctly. # rndc status rndc: connection to remote host closed This may indicate that * the remote server is using an older version of the command protocol, * this host is not authorize

Re: help with rndc fail

2011-01-14 Thread pyh
And, the named version is: # named -v BIND 9.6.1-P2 I'm pretty sure the secret in both named.conf and rndc.conf are the same. Thanks. p...@mail.nsbeta.info writes: Hello gurus, my rndc related commands in bind master with multi-views run fail,but in slave it's running correctly.

Re: help with rndc fail

2011-01-14 Thread pyh
RNDC is only allowed from localhost, so the only place these would work would be from a command shell on the server that is the master. You did not specify where you were running rndc. I run it on master. Here is the -V output: # rndc -V status create memory context create socket manage

Re: help with rndc fail

2011-01-14 Thread pyh
RNDC is only allowed from localhost, so the only place these would work would be from a command shell on the server that is the master. You did not specify where you were running rndc. Hello, I'm running it in master. Here is the -V output: # rndc -V status create memory context create

queryperf for stress test

2011-01-14 Thread ju wusuo
run queryperf on the same server and got a not bad number at around 60,000 qps, however, the cpu and memory are far from used up, what else could be the limiting factors for getting higher qps numbers? ___ bind-users mailing list bind-users@list

Re: queryperf for stress test

2011-01-14 Thread pyh
ju wusuo writes: run queryperf on the same server and got a not bad number at around 60,000 qps, however, the cpu and memory are far from used up, what else could be the limiting factors for getting higher qps numbers? rebuild bind and enable the threads? __

Re: help with rndc fail

2011-01-14 Thread pyh
I don't know what's the problem. Just copied the config files to another host and run bind master on it, everything works fine, including the zone transfer for multi-views. Thanks. p...@mail.nsbeta.info writes: And, the named version is: # named -v BIND 9.6.1-P2 I'm pretty sure t