Re: Unbound in base (review)

2012-03-26 Thread Jakob Schlyter
Any more feedback on this? We need more testing to proceed! jakob

Re: Unbound in base

2012-02-22 Thread Jakob Schlyter
Hi Bjvrn, First - thanks a lot for doing this; it has been on my todo-list for ages and I really appreciate this getting done. - Have you considered getting rid of all the ldns cruft that we would not use anyway? - Could you try to link ldns static and not install neither the ldns library, inclu

NSD 3.2.7 diff

2011-01-26 Thread Jakob Schlyter
If you are using NSD, please go get the diff for NSD 3.2.7 from http://www.schlyter.se/jakob/openbsd/nsd-327.diff. I already have some positive feedback, but would appreciate at least one or two more test results before committing. jakob

Re: Patch: Updated default NSD permission/locations

2011-01-18 Thread Jakob Schlyter
On 18 jan 2011, at 00.44, Brad wrote: > What shipped with 4.8 was incomplete. That is not in a usable state and still > isn't now that binaries are being built and installed. Well you have a > different definition of what "works" means. Do we ship BIND without > the /etc/rc start up bits and /var/

Re: Patch: Updated default NSD permission/locations

2011-01-17 Thread Jakob Schlyter
On 17 jan 2011, at 23.13, Jakob Schlyter wrote: > NSD in the tree works just fine (although running as root) - it is no worse than it was in 4.8. correction: nsd is of course not running as root, it's running as user _nsd. jakob

Re: Patch: Updated default NSD permission/locations

2011-01-17 Thread Jakob Schlyter
On 16 jan 2011, at 23.03, Brad wrote: > The release is quickly approaching. The proposed diff still has issues. If > this stuff is not resolved and commited before the release nsd in base > should be disabled. Shipping incomplete and broken stuff isn't very useful > for users. yes, the proposed d

Re: Patch: Updated default NSD permission/locations

2011-01-16 Thread Jakob Schlyter
. I agree. Do we have more people willing to help review and contribute? jakob -- Jakob Schlyter Kirei AB - www.kirei.se

Re: Patch: Updated default NSD permission/locations

2010-10-02 Thread Jakob Schlyter
On 2 okt 2010, at 13.48, Stuart Henderson wrote: > I think it makes sense to do have a separate user for these, that's how > I've been running nsd in the past. did you make nsd-{patch,zonec} drop privs to that user, or did you start them as the user? where did you put nsd.db? I guess a subdir of

Patch: Updated default NSD permission/locations

2010-10-01 Thread Jakob Schlyter
The following patches makes establish the following default NSD permissions/locations: - /var/nsd/db for stuff that nsd(8) may write to (as user/group _nsd) - /var/nsd/nsd.db for the read-only database. - /var/nsd/zones default zone directory. - /etc/nsd.conf for the config file This still requir

Advice needed on NSD users and paths

2010-08-25 Thread Jakob Schlyter
hi, I'd like some advice how to set the default configuration for NSD in OpenBSD. Some background information: - NSD stores all zone data in a database, nsd.db. This file is opened read-only by nsd(8), while running chrooted in /var/nsd. - Incoming zone transfers are written to ixfr.db by nsd(8),

Re: Testing NSD

2010-08-22 Thread Jakob Schlyter
On 23 aug 2010, at 04.16, patrick keshishian wrote: > Is the idea to replace bind altogether from base? If so, my initial searching shows NSD doesn't support caching nor views (although, my googling skills suck). Are these being considered? The plan is that Unbound will be imported as a caching r

Testing NSD

2010-08-22 Thread Jakob Schlyter
hi, I've just update the in-tree version of NSD to v3.2.6 and would really appreciate some testing results on various platforms as well as feedback on the default configuration. The next step - if everything works nicely - is to enable NSD in the build and remove the NSD port. Note: zonec is cal