<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi</p>
<p>I have some trouble with the parental-agents. Anyone seen this
before/can give me a clue to get this working?<br>
</p>
<p>Tried with my two recursive resolvers first, then localhost. No
difference.</p>
<p>From the log<br>
</p>
<p><font face="monospace">named[3420650]: zone lowinger.se/IN
(signed): checkds: empty DS response from
2a00:f680:100:1501::32#53<br>
named[3420650]: zone lowinger.se/IN (signed): checkds: empty DS
response from 2a00:f680:10:1501::33#53<br>
named[3428351]: zone lowinger.se/IN (signed): checkds: empty DS
response from 127.0.0.1#53</font></p>
<font face="monospace"> </font>
<p><font face="monospace">zone "lowinger.se" {</font></p>
<p><font face="monospace"> type primary;<br>
file "lowinger.se";<br>
dnssec-policy lowinger-policy;<br>
inline-signing yes;<br>
// parental-agents {<br>
// 2a00:f680:100:1501::32;<br>
// 2a00:f680:100:1501::33;<br>
//
};
<br>
parental-agents { 127.0.0.1; };<br>
};</font><br>
</p>
<p>BIND 9.18.10-1+ubuntu22.04.1+isc+1-Ubuntu (Stable Release)
<id:><b><br>
<br>
</b></p>
<p> dig has no problem resolving the DS record.<br>
</p>
<p># dig @127.0.0.1 lowinger.se ds +short<br>
59647 14 2
825E888C2FAA4F70241467A257C02C66AD5DAFDB818253B7FEB52DA4 BEB071CA<br>
</p>
<p># dig @2a00:f680:100:1501::32 lowinger.se ds +short<br>
59647 14 2
825E888C2FAA4F70241467A257C02C66AD5DAFDB818253B7FEB52DA4 BEB071CA<br>
</p>
<p># dig @2a00:f680:100:1501::33 lowinger.se ds +short<br>
59647 14 2
825E888C2FAA4F70241467A257C02C66AD5DAFDB818253B7FEB52DA4 BEB071CA<br>
<br>
</p>
<p><br>
</p>
<pre class="moz-signature" cols="72">--
Regards / Med vänlig hälsning
Anders Löwinger, CEO, Abundo AB, +46 72 206 0322</pre>
</body>
</html>