9.9.0b1 inline-signing questions

Spain, Dr. Jeffry A. spainj at countryday.net
Fri Nov 18 19:04:40 UTC 2011


Thanks, Evan. Can you also comment about the meaning of "BITWS=2011111502" at the beginning of the output of named-journalprint? Jeff.

-----Original Message-----
From: Evan Hunt [mailto:each at isc.org] 
Sent: Friday, November 18, 2011 1:59 PM
To: Spain, Dr. Jeffry A.
Cc: bind-users at lists.isc.org
Subject: Re: 9.9.0b1 inline-signing questions

> I attempted to freeze the
> zone using "rndc freeze jaspain.net", and this resulted in the error 
> message "rndc: 'freeze' failed: not dynamic". "rndc thaw jaspain.net"
> yielded no messages, but added a syslog entry that it was successful. 
> The freeze failure is contrary to what I would have expected. Are 
> "update-policy local;" and "inline-signing yes;" incompatible?

It shouldn't be, that's probably a bug.  Can you open a ticket at bind9-bugs at isc.org about it?

> Fourteen minutes after the nsupdate, bind rewrote jaspain.net.db.signed.
> Is there a utility akin to named-journalprint that would display the 
> contents of jaspain.net.db.signed in human-readable form?

It's a raw-format zonefile; you can convert it to text using
named-checkzone:

    named-checkzone -D -f raw jaspain.net jaspain.net.db.signed

--
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.



More information about the bind-users mailing list