<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi Tony,<div class=""><br class=""></div><div class="">sorry for the late replay.</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">Am 07.06.2018 um 14:20 schrieb Tony Finch <<a href="mailto:dot@dotat.at" class="">dot@dotat.at</a>>:</div><br class="Apple-interchange-newline"><div class=""><div class="">Axel Rau <<a href="mailto:Axel.Rau@Chaos1.DE" class="">Axel.Rau@Chaos1.DE</a>> wrote:<br class=""><blockquote type="cite" class=""><br class="">occasionally named 9.11.3 fails to increment SOA serial like here:<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>file: 2018060605 dns: 2018060604<br class=""></blockquote><br class="">With inline signing the signed and unsigned zones have separate serial<br class="">numbers, so this is normal. If I understand inline-signing correctly, when<br class="">you only modify the unsigned zone's serial number, that is not a big<br class="">enough change to require an update to the signed version of the zone.<br class=""></div></div></blockquote>I changed a RR and the serial. Immediately after such a change, both</div><div>serials are usually equal, which my script checks.</div><div>If thea are different, this usually indicates some error with signing.<br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">You can use `rndc zonestatus` to see the server's view of both serial<br class="">numbers.<br class=""></div></div></blockquote>I see.<br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">You can use `rndc signing -serial` to set the serial number of the signed<br class="">zone.<br class=""><br class="">You might want to set `serial-update-method` if you want something more<br class="">meaningful than an increment for each update (e.g. `date`).<br class=""></div></div></blockquote></div><div class=""><br class="webkit-block-placeholder"></div><div class="">OK.</div><div class=""><br class=""></div><div class="">Thanks for responding,</div><div class="">Axel</div><div class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant-ligatures: normal; font-variant-position: normal; font-variant-caps: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">---<br class="">PGP-Key:29E99DD6 ☀ computing @ chaos claudius</div></div></div>
</div>
<br class=""></div></body></html>