Problem with an unsigned private subzone of a signed public zone

Tony Finch dot at dotat.at
Mon Apr 19 21:35:18 UTC 2010


On 19 Apr 2010, at 20:40, Chris Thompson <cet1 at cam.ac.uk> wrote:

> On Apr 19 2010, I wrote:
>
> [...]
>> Of course, it could also prove there is no DS record for
>> private.cam.ac.uk, but the absence of NS records as well
>> apparently makes it think that private.cam.ac.uk is bogus.
>
> More experiments indicate that something changed between
> 9.6.1-P3 and 9.6.2rc1 - previously the "type stub" setup
> worked OK without a delegation in the signed parent.

This change has broken a configuration that I was on the verge of  
deploying :-(

Tony (on his iPod).
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/




More information about the bind-users mailing list