Re: [Pdns-users] Disabling DNSSEC on a Domain

2011-06-14 Thread Craig Whitmore
On 14/06/11 9:33 PM, "bert hubert" wrote: >On Tue, Jun 14, 2011 at 08:56:41PM +1200, Craig Whitmore wrote: >> A have been trying to automate this all and have a number of questions? >> >> 1. http://doc.powerdns.com/dnssec-operational-doctrine.html say to use >> "pdnssec disable-dnssec" but the

Re: [Pdns-users] Disabling DNSSEC on a Domain

2011-06-14 Thread bert hubert
On Tue, Jun 14, 2011 at 09:22:20PM +1200, Craig Whitmore wrote: > I have to as far as I can tell.. > > pdnssec hash-zone-record spam.co.nz test105.spam.co.nz > > Get the hash and then use > > insert into records (domain_id,name,content,type,ttl,prio,ordername,auth) > values ("1","test44.spam.co.

Re: [Pdns-users] Disabling DNSSEC on a Domain

2011-06-14 Thread bert hubert
On Tue, Jun 14, 2011 at 08:56:41PM +1200, Craig Whitmore wrote: > A have been trying to automate this all and have a number of questionsŠ > > 1. http://doc.powerdns.com/dnssec-operational-doctrine.html say to use > "pdnssec disable-dnssec" but there is no command so what the "proper" way of > maki

Re: [Pdns-users] Disabling DNSSEC on a Domain

2011-06-14 Thread Craig Whitmore
Replying to my own post.. but I found the "answer" I think about question 3 I have to as far as I can tell.. pdnssec hash-zone-record spam.co.nz test105.spam.co.nz Get the hash and then use insert into records (domain_id,name,content,type,ttl,prio,ordername,auth) values ("1","test44.spam.co.nz"

Re: [Pdns-users] Disabling DNSSEC on a Domain

2011-06-14 Thread Chris Russell
Hi Craig, Ø 3) do I have to run rectify-zone every time I add/change an entry. I add an entry into the database and then read the SOA and increase it and update it to be bigger. I asked this question a few weeks back, you should not need to run rectify-zone *IF* you complete the ordername fi

[Pdns-users] Disabling DNSSEC on a Domain

2011-06-14 Thread Craig Whitmore
A have been trying to automate this all and have a number of questionsŠ 1. http://doc.powerdns.com/dnssec-operational-doctrine.html say to use "pdnssec disable-dnssec" but there is no command so what the "proper" way of making a domain insecure (the opposite of secure-zone basically. remove-zone-k