Re: automatic resigning in 9.6.x

2009-03-07 Thread Evan Hunt
> Ok...so to implement this in bind 9.4.2-P2, I see the directive > sig-validity-interval in the ARM, if I set this to 1, > edit zone.db.signed, add a new entry, increment the serial, rndc > reload, what tells bind to resign the zone, and when? Using a dynamic zone, and sending an update. First o

Re: automatic resigning in 9.6.x

2009-03-07 Thread R Dicaire
On Fri, Mar 6, 2009 at 11:46 PM, Evan Hunt wrote: > BIND 9 has, I believe, always had some support for automatic signing in the > case of zone updates--at least as far back as 9.3, and I haven't looked at > anything earlier.  Basically, if you have a signed zone and you insert a > new record, tha

Re: automatic resigning in 9.6.x

2009-03-06 Thread Evan Hunt
> What is a "dynamic zone" in this context? In the case of master zones, it means the zone allows DDNS updates (e.g., from nsupdate). So it either has an update-policy set, or an allow-update ACL set to something other than "none". (Incidentally, making it easier to set up DDNS and, by extension

automatic resigning in 9.6.x

2009-03-06 Thread R Dicaire
Hi folks, searched the docs, and list archives and have found only one reference in the archive regarding implementing the automated resigning of zones. From a listmail response by Mark Andrews dated Tue Oct 14 23:39:45 UTC 2008 in response to Subject: Gritty details of automatic resigining in 9.6?