Re: Struggling with dnssec-policy timers

2022-11-28 Thread Matthijs Mekking
On 29-11-2022 00:39, vom513 wrote: On Nov 28, 2022, at 3:12 PM, vom513 wrote: Thanks for the reply and info… I would have thought the CDS would be published before the key went active. I.e. there would be a period of TWO DS’es at the parent (I’m assuming the parent supports CDS/CDNSKEY

Re: Add TXT records for SPF when CNAME exists in same sub-domain

2022-11-28 Thread Mark Andrews
Place the TXT record at the target of the CNAME. > On 29 Nov 2022, at 11:03, Chris Liesfield wrote: > > Hi All. Hopefully my terminology is correct and I make sense. > > We have a main domain "something.com.au" with a few sub-domains, "this", > "that", etc. > > For all of our 'A' records in

RE: Add TXT records for SPF when CNAME exists in same sub-domain

2022-11-28 Thread John W. Blue via bind-users
RFC 1034 3.6.2 second paragraph: “If a CNAME RR is present at a node, no other data should be present; this ensures that the data for a canonical name and its aliases cannot be different. This rule also insures that a cached CNAME can be used without checking with an authoritative server for

Re: when does bind calls plugin_destroy ?

2022-11-28 Thread Evan Hunt
On Tue, Nov 29, 2022 at 12:08:30AM +, Marcus Kool wrote: > I see random behavior while I do the same test: start named with unmodified > config file with 2 views (each a plugin instance), run the same 40+ queries > and reconfigure.  repeat: a few more queries and reconfigure > > 9.16.1 rarely

Re: when does bind calls plugin_destroy ?

2022-11-28 Thread Marcus Kool
On 28/11/2022 22:07, Evan Hunt wrote: On Mon, Nov 28, 2022 at 12:53:16PM +, Marcus Kool wrote: In a test setup there are two instances of the same plugin and everything works as expected (plugin_register is called twice - once for each view). However, "rndc reconfig" calls plugin_register

Add TXT records for SPF when CNAME exists in same sub-domain

2022-11-28 Thread Chris Liesfield
Hi All. Hopefully my terminology is correct and I make sense. We have a main domain "something.com.au" with a few sub-domains, "this", "that", etc. For all of our 'A' records in something.com.au, we have specified TXT records for SPF, however our sub-domains contain CNAMEs only. It appears TXT

Re: Struggling with dnssec-policy timers

2022-11-28 Thread vom513
> On Nov 28, 2022, at 3:12 PM, vom513 wrote: > > Thanks for the reply and info… > > I would have thought the CDS would be published before the key went active. > I.e. there would be a period of TWO DS’es at the parent (I’m assuming the > parent supports CDS/CDNSKEY which mine (registrar)

Re: when does bind calls plugin_destroy ?

2022-11-28 Thread Evan Hunt
On Mon, Nov 28, 2022 at 12:53:16PM +, Marcus Kool wrote: > In a test setup there are two instances of the same plugin and everything > works as expected (plugin_register is called twice - once for each view). > > However, "rndc reconfig" calls plugin_register again twice but does not call >

copr.fedorainfracloud.org for Fedora 37

2022-11-28 Thread Fred Morris
Hey there, that was me (a linguistic "sturdy indefensible"), trying to enable it so I could download the package for Fedora 37. Don't panic, I comiserate. Somebody made Fedora 37 (Python 3.11, actually) an Issue for another asyncio reliant project I support so I thought I'd get ahead of it and

Re: Struggling with dnssec-policy timers

2022-11-28 Thread vom513
Thanks for the reply and info… I would have thought the CDS would be published before the key went active. I.e. there would be a period of TWO DS’es at the parent (I’m assuming the parent supports CDS/CDNSKEY which mine (registrar) does). Since the new key goes active, CDS is published, and

when does bind calls plugin_destroy ?

2022-11-28 Thread Marcus Kool
Hi, I am developing a plugin for Bind.  The API has 4 functions: plugin_register, plugin_check, plugin_version and plugin_destroy. In a test setup there are two instances of the same plugin and everything works as expected (plugin_register is called twice - once for each view). However,

Re: bind-users Digest, Vol 4123, Issue 2

2022-11-28 Thread Matus UHLAR - fantomas
On 28.11.22 06:00, GAJENDRA CHOUBISA wrote: Please sir in future no mail send on me sir. Benny has explained you how to unsubscribe. It's even shown in the mail you are quoting: To subscribe or unsubscribe via the World Wide Web, visit

Re: Struggling with dnssec-policy timers

2022-11-28 Thread Matthijs Mekking
Hi, On 27-11-2022 23:32, vom513 wrote: Hello all, I’m still having a really hard time understanding and getting my timings right. At least I think I am (from the way I’m reading the status/logs/state files). I let my current CSK get completely “omnipresent” for all it’s timers (I’m not even