Jakub Hrozek wrote:
-----BEGIN PGP SIGNED MESSAGE-----
The doc= value was misleading. The "minimum" value in SOA record defines
how long should NXDOMAIN responses be cached. As per RFC 2308, the
maximum allowed value should be 3 hours.
Also, many parameters allowed negative values which really don't make
sense there (and RFC 1035 disallows them).
ack, pushed to master
Freeipa-devel mailing list