Hi Nick,
Thanks for bringing this to our attention. Yes, this is a copy paste
error. I think it can be removed, although we could change it because
you should make sure the address matches with what the parental agent
expects.
Best regards,
Matthijs
On 01-05-2022 07:18, Nick Tait via bind-users wrote:
Hi list.
I've been reading the latest BIND9 documentation on the new DNSSEC
features, and section 4.2.28.1 got me horribly confused:
/The following options apply to DS queries sent to
//|parental-agents|//:/
/|parental-source|/
/|parental-source|//determines which local source address, and
optionally UDP port, is used to send parental DS queries. This
address must appear in the secondary server’s
//|parental-agents|//zone clause. This statement sets the
//|parental-source|//for all zones, but can be overridden on a
per-zone or per-view basis by including a
//|parental-source|//statement within the //|zone|//or
//|view|//block in the configuration file./
No matter how many times I read the sentence in blue font, I couldn't
make sense of it...
I finally realised that the parental-source paragraph is almost
identical to the documentation for notify-source:
/|notify-source|/
/|notify-source|//determines which local source address, and
optionally UDP port, is used to send NOTIFY messages. This
address must appear in the secondary server’s
//|primaries|//zone clause or in an //|allow-notify|//clause.
This statement sets the //|notify-source|//for all zones, but
can be overridden on a per-zone or per-view basis by including a
//|notify-source|//statement within the //|zone|//or
//|view|//block in the configuration file./
And so I can only assume that the problematic sentence in
parental-source (i.e. "/This address must appear in the secondary
server’s //|parental-agents|//zone clause./") is a copy-paste error? If
that is the case can the sentence please be removed from the documentation?
Or if I'm mistaken can anybody please give an example to explain what
this is trying to say?
Thanks,
Nick.
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
