Re: Need guidance on configuring DNSSEC

2013-10-11 Thread David Newman
On 10/11/13 7:32 AM, Vishal Gandhi wrote: > We are planning to sign local zone (fdu.local). Is it required to sign > the parent zone (fdu.edu ) as well or we can live with > it unsigned? > What are pros and cons of signing parent zone (fdu.edu )? DNSSEC is based o

Need guidance on configuring DNSSEC

2013-10-11 Thread Vishal Gandhi
Hi, We are using BIND v9.8.2. Currently, we are setting up AD infrastructure for internal/local network. We've configured one controller to be the primary for this local zone (fdu.local) for DNS queries. Our primary DNS server (which indeed is a different server) is configured to hold this a