<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 10/21/2024 9:35 AM, Bowie Bailey via
bind-users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:9c1500c3-5066-4420-96a9-b41a860d915e@BUC.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div class="moz-cite-prefix">On 10/18/2024 6:19 PM, Nick Tait via
bind-users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:ba194dd7-86b6-4eec-9b2a-9ccd638c531a@tait.net.nz">
<meta http-equiv="Content-Type"
content="text/html; charset=UTF-8">
<div class="moz-cite-prefix">On 19/10/2024 05:50, Bowie Bailey
via bind-users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:140774f6-9b90-4bd4-a877-3363b6504868@BUC.com">
<meta http-equiv="Content-Type"
content="text/html; charset=UTF-8">
<div class="moz-cite-prefix">On 10/18/2024 12:07 PM, Bob
Harold wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CA+nkc8BOusQvo=hLTKRWioSfJA74WPwBw1gwLo5TtSC54d=1Rg@mail.gmail.com">
<meta http-equiv="content-type"
content="text/html; charset=UTF-8">
<div dir="ltr">
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Fri, Oct 18, 2024
at 11:33 AM Bowie Bailey via bind-users <<a
href="mailto:bind-users@lists.isc.org"
moz-do-not-send="true" class="moz-txt-link-freetext">bind-users@lists.isc.org</a>>
wrote:<br>
</div>
</div>
</div>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite"
cite="mid:ba194dd7-86b6-4eec-9b2a-9ccd638c531a@tait.net.nz">
<blockquote type="cite"
cite="mid:140774f6-9b90-4bd4-a877-3363b6504868@BUC.com">
<blockquote type="cite"
cite="mid:CA+nkc8BOusQvo=hLTKRWioSfJA74WPwBw1gwLo5TtSC54d=1Rg@mail.gmail.com">
<div dir="ltr">
<div class="gmail_quote">
<blockquote class="gmail_quote"
style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
The second issue is that I have multiple zones that
all point to the <br>
same file since those domains all go to the same set
of servers. Right <br>
now, I am using the same zone file for all of them.
This works fine <br>
currently, but when I try to enable DNSSEC for those
domains, I get an <br>
error "writable file ... already in use". The simple
answer would be to <br>
make a unique file for each zone, however I would
rather keep a single <br>
file updated instead of having to make changes to all
of the individual <br>
files whenever something changes with those servers.
So far, the only <br>
other solution I've found is to manage the keys
manually, which seems to <br>
add quite a bit of complexity to the setup. Is there
a better way to do <br>
this?<br>
</blockquote>
<div><br>
</div>
<br>
</div>
</div>
</blockquote>
zone "test.com" {<br>
type master;<br>
file "db.test.com";<br>
};<br>
zone "test2.com" {<br>
type master;<br>
file "db.test.com";<br>
};<br>
<br>
I would like to have DNSSEC active on both domains, but since
they are sharing a file, Bind complains about it.<br>
</blockquote>
<p>If you are using Linux, I'd suggest looking at using
filesystem links so that you can have separate files that
share the same content. (See "man ln".)</p>
</blockquote>
<br>
That is an interesting idea. I'm familiar with hard links, but I
hadn't considered using them here. My other idea was copying one
of the zone files to a "master" file and then $INCLUDING that file
in each of the individual zone files. I'm not sure if bind will
let me put the SOA into an include. I'll do some testing on both
options later today and see what works.</blockquote>
<br>
Just a followup here for anyone who finds this thread later.<br>
<br>
I did some testing and both options seem to work. I haven't updated
my live domains or sent key info to the registrar yet, but
everything looks good on my test domains.<br>
<br>
Hardlinking the files together worked fine with no errors at all.
Softlinks to a master file also worked just fine.<br>
<br>
Creating zone files that just say "$INCLUDE db.master" with no other
content and having the SOA and everything else in db.master also
works. I will probably go with either $INCLUDE or softlinks rather
than hardlinks. Hardlinks are hard to distinguish from separate
files on first glance, which could lead to mistakes later on.<br>
<br>
Apparently, the only requirement is that the zone files have unique
names for DNSSEC. It doesn't seem to care about them otherwise.<br>
<br>
I am somewhat surprised that I was able to have the SOA in an
include file. I was expecting Bind to throw an error on that even
without the DNSSEC processing.<br>
<br>
Thanks for the comments and suggestions everyone!<br>
<br>
-- <br>
Bowie<br>
</body>
</html>