Re: [Pdns-users] DNSSEC and Master/Slave setup

2011-02-03 Thread Christof Meerwald
On Thu, 3 Feb 2011 10:28:23 +0100, bert hubert wrote: [...] > Ideas? > > I prefer a solution where we don't actually increment the serial in the > database but overlay it with something that autoincrements ('weeks since > january first 2011'). I actually like that idea - guess that would work for

Re: [Pdns-users] DNSSEC and Master/Slave setup

2011-02-03 Thread bert hubert
On Thu, Feb 03, 2011 at 08:44:08AM +0100, Christof Meerwald wrote: > I kind of expected this to happen today - the master (ns.cmeerw.net) > with the keying material has now updated the RRSIG records, but the > slave (ns2.cmeerw.net, no keying material) still returns the old RRSIG > records: Indeed

[Pdns-users] DNSSEC and Master/Slave setup

2011-02-02 Thread Christof Meerwald
Hi, I kind of expected this to happen today - the master (ns.cmeerw.net) with the keying material has now updated the RRSIG records, but the slave (ns2.cmeerw.net, no keying material) still returns the old RRSIG records: ; <<>> DiG 9.7.1-P2 <<>> +dnssec -t soa cmeerw.priv.at @ns.cmeerw.net ;; ANS