<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi list.</p>
<p>I've been reading the latest BIND9 documentation on the new
DNSSEC features, and section 4.2.28.1 got me horribly confused:</p>
<blockquote>
<p><i>The following options apply to DS queries sent to </i><i><code
class="docutils literal notranslate"><span class="pre">parental-agents</span></code></i><i>:</i></p>
<dl>
<dt><i><code class="docutils literal notranslate"><span
class="pre">parental-source</span></code></i></dt>
<dd>
<p><i><code class="docutils literal notranslate"><span
class="pre">parental-source</span></code></i><i>
determines which local source address, and
optionally UDP port, is used to send parental DS queries.
<font color="#0000ff">This
address must appear in the secondary server’s </font></i><font
color="#0000ff"><i><code class="docutils literal
notranslate"><span class="pre">parental-agents</span></code></i></font><i><font
color="#0000ff"> zone
clause.</font> This statement sets the </i><i><code
class="docutils literal notranslate"><span class="pre">parental-source</span></code></i><i>
for all zones, but can
be overridden on a per-zone or per-view basis by including
a
</i><i><code class="docutils literal notranslate"><span
class="pre">parental-source</span></code></i><i>
statement within the </i><i><code class="docutils literal
notranslate"><span class="pre">zone</span></code></i><i>
or </i><i><code class="docutils literal notranslate"><span
class="pre">view</span></code></i><i> block in the
configuration file.</i></p>
</dd>
</dl>
</blockquote>
<p>No matter how many times I read the sentence in <font
color="#0000ff">blue</font> font, I couldn't make sense of it...<br>
</p>
<p>I finally realised that the parental-source paragraph is almost
identical to the documentation for notify-source: <br>
</p>
<blockquote>
<dl>
<dt><i><code class="docutils literal notranslate"><span
class="pre">notify-source</span></code></i></dt>
<dd>
<p><i><code class="docutils literal notranslate"><span
class="pre">notify-source</span></code></i><i>
determines which local source address, and
optionally UDP port, is used to send NOTIFY messages. This
address must appear in the secondary server’s </i><i><code
class="docutils literal notranslate"><span class="pre">primaries</span></code></i><i>
zone clause or
in an </i><i><code class="docutils literal notranslate"><span
class="pre">allow-notify</span></code></i><i> clause.
This statement sets the
</i><i><code class="docutils literal notranslate"><span
class="pre">notify-source</span></code></i><i> for all
zones, but can be overridden on a per-zone
or per-view basis by including a </i><i><code
class="docutils literal notranslate"><span class="pre">notify-source</span></code></i><i>
statement within
the </i><i><code class="docutils literal notranslate"><span
class="pre">zone</span></code></i><i> or </i><i><code
class="docutils literal notranslate"><span class="pre">view</span></code></i><i>
block in the configuration file.</i></p>
</dd>
</dl>
</blockquote>
<p>And so I can only assume that the problematic sentence in
parental-source (i.e. "<i><font color="#0000ff">This
address must appear in the secondary server’s </font></i><font
color="#0000ff"><i><code class="docutils literal notranslate"><span
class="pre">parental-agents</span></code></i></font><i><font
color="#0000ff"> zone
clause.</font></i>") is a copy-paste error? If that is the
case can the sentence please be removed from the documentation?<br>
</p>
<p>Or if I'm mistaken can anybody please give an example to explain
what this is trying to say?<br>
</p>
<p>Thanks,<br>
</p>
<p>Nick.<br>
</p>
<p><br>
</p>
</body>
</html>