Re: bind autosign - DS distribution

2010-12-09 Thread Kevin Oberman
> From: Chris Buxton > Date: Thu, 9 Dec 2010 21:16:41 -0800 > Sender: bind-users-bounces+oberman=es@lists.isc.org > > > On Dec 9, 2010, at 2:26 PM, Matus UHLAR - fantomas wrote: > > > Is it possible(planned) for bind to sign slave zone? > > And, are incremental updates possible with dnssec?

Re: bind autosign - DS distribution

2010-12-09 Thread Chris Buxton
On Dec 9, 2010, at 2:26 PM, Matus UHLAR - fantomas wrote: > Is it possible(planned) for bind to sign slave zone? > And, are incremental updates possible with dnssec? > > I'm thinking about hidden master bind loading (un)signed zones and providing > axfr/ixfr to our public servers Secure64 makes

Re: bind autosign - DS distribution

2010-12-09 Thread fakessh @
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Le 10.12.2010 00:24, Matus UHLAR - fantomas a écrit : > On 09.12.10 23:45, fakessh @ wrote: >> webmin implement the mecanism of resign zones > > good to know, but our system fille DNS data using some automatic processes > from more sources and I don'

Re: bind autosign - DS distribution

2010-12-09 Thread Matus UHLAR - fantomas
On 09.12.10 23:45, fakessh @ wrote: > webmin implement the mecanism of resign zones good to know, but our system fille DNS data using some automatic processes from more sources and I don't think they should use webmin for that ;) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantoma

Re: bind autosign - DS distribution

2010-12-09 Thread Matus UHLAR - fantomas
> In message <20101209222644.ga2...@fantomas.sk>, Matus UHLAR - fantomas writes: > > Is it possible(planned) for bind to sign slave zone? On 10.12.10 09:41, Mark Andrews wrote: > The master signs the zone. The slaves just serve it. The master still loads the zone somehow, from a file probably (e

Re: bind autosign - DS distribution

2010-12-09 Thread fakessh @
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Le 09.12.2010 23:26, Matus UHLAR - fantomas a écrit : >> In message <20101209220716.ga2...@fantomas.sk>, Matus UHLAR - fantomas >> writes: >>> pardon my ignorance if this has been discussed (haven't notice), but >>> if BIND is configured to automatica

Re: bind autosign - DS distribution

2010-12-09 Thread Mark Andrews
In message <20101209222644.ga2...@fantomas.sk>, Matus UHLAR - fantomas writes: > > In message <20101209220716.ga2...@fantomas.sk>, Matus UHLAR - fantomas writ > es: > > > pardon my ignorance if this has been discussed (haven't notice), but > > > if BIND is configured to automatically sign dynamic

Re: bind autosign - DS distribution

2010-12-09 Thread Matus UHLAR - fantomas
> In message <20101209220716.ga2...@fantomas.sk>, Matus UHLAR - fantomas writes: > > pardon my ignorance if this has been discussed (haven't notice), but > > if BIND is configured to automatically sign dynamic zones, does it > > distribute DS records to parent zones somehow? and if not, what are wa

Re: bind autosign - DS distribution

2010-12-09 Thread Mark Andrews
In message <20101209220716.ga2...@fantomas.sk>, Matus UHLAR - fantomas writes: > Hello, > > pardon my ignorance if this has been discussed (haven't notice), but > if BIND is configured to automatically sign dynamic zones, does it > distribute DS records to parent zones somehow? and if not, what a

bind autosign - DS distribution

2010-12-09 Thread Matus UHLAR - fantomas
Hello, pardon my ignorance if this has been discussed (haven't notice), but if BIND is configured to automatically sign dynamic zones, does it distribute DS records to parent zones somehow? and if not, what are ways to do that? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.s