Re: Metazones or Something Else?

2014-08-05 Thread Mark Andrews
Personally I'd like to extend UPDATE allow-addzone { acl; }; allow-delzone { acl; }; e.g. nsupdate new zone server addresss [port] key name:secret [masters ] [allow-query ] [allow-transfer ] [allow-update ]

Re: Metazones or Something Else?

2014-08-05 Thread Matus UHLAR - fantomas
On 05.08.14 11:43, Brian Cuttler wrote: The slave trusts the master, for zone files, but creating a new zone? hmmm, when a meta-zone is signed by trusted key, why not? :-) using notifies and IXFR would be even more great... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/

Re: Metazones or Something Else?

2014-08-05 Thread Brian Cuttler
On Tue, Aug 05, 2014 at 09:41:14AM -0500, /dev/rob0 wrote: > On Tue, Aug 05, 2014 at 09:31:31AM -0400, Brian Cuttler wrote: > > On Tue, Aug 05, 2014 at 09:21:07AM -0400, Brian Cuttler wrote: > > > rndc addzone sounds like a very interesting tool, but > > > if you want an automated sync, will requir

Re: Metazones or Something Else?

2014-08-05 Thread /dev/rob0
On Tue, Aug 05, 2014 at 09:31:31AM -0400, Brian Cuttler wrote: > On Tue, Aug 05, 2014 at 09:21:07AM -0400, Brian Cuttler wrote: > > rndc addzone sounds like a very interesting tool, but > > if you want an automated sync, will require something to > > read the source config of the master and then wr

Re: Metazones or Something Else?

2014-08-05 Thread Brian Cuttler
On Tue, Aug 05, 2014 at 09:21:07AM -0400, Brian Cuttler wrote: > > rndc addzone sounds like a very interesting tool, but > if you want an automated sync, will require something to > read the source config of the master and then write the > requisit slave zone information for the dns slave server(s

Re: Metazones or Something Else?

2014-08-05 Thread Brian Cuttler
rndc addzone sounds like a very interesting tool, but if you want an automated sync, will require something to read the source config of the master and then write the requisit slave zone information for the dns slave server(s). Offsite slave servers will require a lot of trust. Rsync solution fo

Re: race condition in bind

2014-08-05 Thread Mukund Sivaraman
Hi Yadi On Tue, Aug 05, 2014 at 02:53:33PM +0800, yhu2 wrote: > There seems to be a race condition in bind/named that leads to a segfault. > This is the patch that solves the problem,and it is not fixed in upstream: Thank you for the report and the patch. I have forwarded it to our internal bug t