<div dir="ltr">We have a series of bind9 nameservers (running some 9.9 and some 9.10). On our slave zones, which are all reading identical slave zone files, one of our servers is running the RedHat default bind 9.9.4-74. The other servers are running bind compiled directly from isc's source. When we issue a named-checkzone on any of the ones compiled straight from isc's source, after every RRSIG line, we see a ; resign line that contains the date/time of that resign. When we issue the same command on RedHat's default, we get all of the same information, minus that line. I was wondering if anyone could tell me what exactly produces that line. I see in the bind source code a comment that it is "Only valid if DNS_RDASETATTR_RESIGN is set in attributes." Where would this be set? If it's in the attributes of the signed zone file, I would think that it should be there, as when any other server reads the same files the data appears. Is this some compile time option? Is there a config file somewhere on the Linux server itself that needs to set this? Really any pointer in the right direction would be appreciated.<div><br></div><div>Example of the symptom:<br></div><div>first the server running RedHat standard, that does not produce the ; resign line</div><div>[root@rutl800p slaves]# named-checkzone -j -f raw -o - <a href="http://myzone.com">myzone.com</a> /var/named/slaves/db.myzone.com.signed <br>zone <a href="http://myzone.com/IN">myzone.com/IN</a>: loaded serial 1460033625 (DNSSEC signed)<br><a href="http://myzone.com">myzone.com</a>. 3600 IN SOA <a href="http://rutl601p.mylocaldomain.com">rutl601p.mylocaldomain.com</a>. <a href="http://hostmaster.mydomain.com">hostmaster.mydomain.com</a>. 1460033625 7200 3600 604800 3600<br><a href="http://myzone.com">myzone.com</a>. 3600 IN RRSIG SOA 13 2 3600 20190716190406 20190616180406 59573 <a href="http://myzone.com">myzone.com</a>. /HXXeswjocBRCgOftRGwX3EeLYSXXBS8r70oJ/K2rZvn301D7XUKr7nf C4QC1bhM+qRIesK0bkCy02KDHR3YVg==<br><a href="http://myzone.com">myzone.com</a>. 3600 IN NS <a href="http://ns1.mydomain.com">ns1.mydomain.com</a>.<br><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div style="font-size:12.8px"><br>Then the other servers that *do* produce it.<br>[root@rutl801p slaves]# named-checkzone -j -f raw -o - <a href="http://myzone.com">myzone.com</a> /var/named/slaves/db.myzone.com.signed <br>zone <a href="http://myzone.com/IN">myzone.com/IN</a>: loaded serial 1460033625 (DNSSEC signed)<br><a href="http://myzone.com">myzone.com</a>. 3600 IN SOA <a href="http://rutl601p.mylocaldomain.com">rutl601p.mylocaldomain.com</a>. <a href="http://hostmaster.mydomain.com">hostmaster.mydomain.com</a>. 1460033625 7200 3600 604800 3600<br><a href="http://myzone.com">myzone.com</a>. 3600 IN RRSIG SOA 13 2 3600 20190716190406 20190616180406 59573 <a href="http://myzone.com">myzone.com</a>. /HXXeswjocBRCgOftRGwX3EeLYSXXBS8r70oJ/K2rZvn301D7XUKr7nf C4QC1bhM+qRIesK0bkCy02KDHR3YVg==<br>; resign=20190716190406<br><a href="http://myzone.com">myzone.com</a>. 3600 IN NS <a href="http://ns1.mydomain.com">ns1.mydomain.com</a>.<br><br><br><table cellspacing="0" width="470" cellpadding="0" border="0" style="font-size:12px;border-collapse:collapse;color:rgb(51,51,51);font-family:Muli,sans-serif"><tbody><tr><td width="100" valign="center" style="padding:0px 8px 0px 0px"><img src="https://drive.google.com/a/mcclatchy.com/uc?id=1cVQEcVCsRi20mX-aVLau3kAFqTI0BKUE&export=download" width="96" height="50"></td><td valign="top" style="padding:0px 0px 0px 15px;border-left:1px solid rgb(0,92,165);border-top-color:rgb(0,92,165);border-right-color:rgb(0,92,165);border-bottom-color:rgb(0,92,165)">Stephen Gilbert<table cellspacing="0" cellpadding="0" border="0" style="border-collapse:collapse;background-color:transparent;line-height:1.4;font-family:Arial,Helvetica,sans-serif;font-size:11.7px;color:rgb(0,0,1)"><tbody><tr><td style="padding:0px"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><font color="#999999" face="Arial"><span style="font-size:12px;white-space:pre-wrap">Systems Administrator</span></font></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"> </p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:9pt;font-family:Arial;color:rgb(0,92,165);background-color:transparent;font-weight:700;vertical-align:baseline;white-space:pre-wrap">P</span><span style="font-size:9pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"> 704-589-0332</span></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:9pt;font-family:Arial;color:rgb(0,92,165);background-color:transparent;font-weight:700;vertical-align:baseline;white-space:pre-wrap">E</span><span style="font-size:9pt;font-family:Arial;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"> <font color="#1155cc"><a href="mailto:email@mcclatchy.com" style="color:rgb(17,85,204)" target="_blank">sgilbert@mcclatchy.com</a></font></span></p><span style="color:rgb(80,0,80)"><span style="font-size:9pt;font-family:Arial;color:rgb(0,92,165);background-color:transparent;font-weight:700;vertical-align:baseline;white-space:pre-wrap">W</span><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><span style="font-family:Arial;font-size:9pt"> </span><font color="#1155cc" face="Arial"><span style="font-size:9pt"><a href="http://mcclatchy.com/" style="color:rgb(17,85,204)" target="_blank">mcclatchy.com</a></span></font><span style="font-family:Arial;font-size:9pt">
</span><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:8pt;font-family:Arial;color:rgb(17,85,204);background-color:transparent;font-weight:700;vertical-align:baseline"><a href="https://www.facebook.com/McClatchyCo/" style="color:rgb(17,85,204)" target="_blank"><img src="https://lh6.googleusercontent.com/ay3RhAz1tq46_qFRV7ITnFOpsDC-aWaq7kcV7S8weOVXGC-anZQsJNMx3k9UX3jp_-RsByKuUzMBccOEjkwFpx3E7b6MuXQvWKK1V03QjRVggGtlJX_kwkQHZgN6pzghRd3VaCA" width="20" height="20" alt="McClatchy Facebook" style="border:none"></a></span><span style="font-size:9pt;font-family:Arial;background-color:transparent;vertical-align:baseline"> </span><span style="font-size:8pt;font-family:Arial;color:rgb(17,85,204);background-color:transparent;font-weight:700;vertical-align:baseline"><a href="https://twitter.com/mcclatchy?lang=en" style="color:rgb(17,85,204)" target="_blank"><img src="https://lh4.googleusercontent.com/ME0BAasmxfXZ-TRGCRTaWl2fOILy__eqVVMyjjm9714hxYnqt4tcKi173zDVb5le5UmsYQD7sb72cbucACwbTLQENk1nbjTz0atALFEQmkMsEA2wTj8BfcC-v_NTkc9alWjcuEY" width="20" height="20" alt="McClatchy Twitter" style="border:none"></a></span><span style="font-size:8pt;font-family:Arial;color:rgb(0,92,165);background-color:transparent;font-weight:700;vertical-align:baseline"> </span><span style="color:rgb(17,85,204);font-size:9pt;font-family:Arial;background-color:transparent;vertical-align:baseline"><a href="https://www.linkedin.com/company/the-mcclatchy-company/" style="color:rgb(17,85,204)" target="_blank"><img src="https://lh3.googleusercontent.com/f2KBI5c9621OrFXzYCfj_kUIpSMW0Z8zu4Jx2hogagLDqovHm-wKI71U0XpNxaSskiPoedxzXarRjRXTzIttg6Xyu3td_6zVILkZ-jzOvtLfW_xjRzSO8GLkv_VEgQcYFyOibuk" width="20" height="20" alt="McClatchy LinkedIn" style="border:none"></a></span></p><div><br></div></span></span></td></tr></tbody></table></td></tr></tbody></table></div></div></div></div></div></div></div></div></div></div></div></div></div></div>