Re: DNSSEC and child zones on same authoritative NS. Expert help needed.

2010-03-16 Thread Gary Wallis
Alan Clegg wrote: Gary Wallis wrote: [other stuff snipped out] Regarding my main question: How to delegate signing authority from parent yourdomain.com to child ns1.yourdomain.com. Insert the DS records from the child into the parent and re-sign the parent. I still have to setup a DNSSEC

Re: DNSSEC and child zones on same authoritative NS. Expert help needed.

2010-03-16 Thread Alan Clegg
Gary Wallis wrote: [other stuff snipped out] > Regarding my main question: > > How to delegate signing authority from parent yourdomain.com to child > ns1.yourdomain.com. Insert the DS records from the child into the parent and re-sign the parent. > I still have to setup a DNSSEC resolver to b

Re: DNSSEC and child zones on same authoritative NS. Expert help needed.

2010-03-16 Thread Sam Wilson
In article , Gary Wallis wrote: > Sam Wilson wrote: > > In article , > > Gary Wallis wrote: > > > >> Let's say I have this setup : > >> > >> BIND 9.4 named.conf includes a master.zones file with the following: > >> > >> ... > >> zone "ns1.yourdomain.com" { > >> type

Re: DNSSEC and child zones on same authoritative NS. Expert help needed.

2010-03-16 Thread Barry Margolin
In article , Gary Wallis wrote: > I would be nice to know what a zone apex is since what I have found on > the web so far is pretty self-referential. The resource record set for the zone name itself (e.g. SOA and NS) is the apex. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEA

Re: DNSSEC and child zones on same authoritative NS. Expert help needed.

2010-03-16 Thread Gary Wallis
Sam Wilson wrote: In article , Gary Wallis wrote: Let's say I have this setup : BIND 9.4 named.conf includes a master.zones file with the following: ... zone "ns1.yourdomain.com" { type master; file "master/external/n/ns1.yourdomain.com.signed";

Re: DNSSEC and child zones on same authoritative NS. Expert help needed.

2010-03-16 Thread Sam Wilson
In article , Gary Wallis wrote: > Let's say I have this setup : > > BIND 9.4 named.conf includes a master.zones file with the following: > > ... > zone "ns1.yourdomain.com" { > type master; > file "master/external/n/ns1.yourdomain.com.signed"; >

Re: DNSSEC and child zones on same authoritative NS. Expert help needed.

2010-03-15 Thread Mark Andrews
In message <4b9ee17d.8020...@gmail.com>, Gary Wallis writes: > Let's say I have this setup : > > BIND 9.4 named.conf includes a master.zones file with the following: > > ... > zone "ns1.yourdomain.com" { > type master; > file "master/external/n/ns1.your

DNSSEC and child zones on same authoritative NS. Expert help needed.

2010-03-15 Thread Gary Wallis
Let's say I have this setup : BIND 9.4 named.conf includes a master.zones file with the following: ... zone "ns1.yourdomain.com" { type master; file "master/external/n/ns1.yourdomain.com.signed"; }; zone "ns2.yourdomain.com" {