Hi Einar,
That's not a problem, but some of our public secondaries are external
and getting them to force an AXFR is a manual process. I want to find
a way to make sure that after a failover to backup signer, that it
uses a serial that is higher than the public secondaries have. We can
deal with the hidden primaries.
I wonder how it can happen that the SOA serial of the backup signer is
lower than of the default one. If the signers are equivalently
configured and they both run permanently in parallel, they should
usually have the same SOA serial, which depends on how many times has
the upstream (un-signed) zone been changed that day.
/Libor
--
