Re: process of updating slave servers

2011-02-14 Thread Barry Margolin
In article , donovan jeffrey j wrote: > Greetings > > I have a new slave server. I edited my master, incremented the serial number > and reloaded named. The master is fine, and contains the new entry but the > slaves are still running the previous entries. > > what is the basic operation of

Re: BIND 9.7.3 is now available.

2011-02-14 Thread Dennis Clarke
> 2011/2/15 Mark Andrews : >> >> 9.7.3 >> >>     * BIND now builds with threads disabled in versions of NetBSD >> earlier >>       than 5.0 and with pthreads enabled by default in NetBSD versions >>       5.0 and higher. Also removes support for unproven-pthreads, >>       mit-pthreads and ptl2. [

Re: process of updating slave servers

2011-02-14 Thread Terry.
2011/2/15 donovan jeffrey j : > > On Feb 14, 2011, at 8:31 PM, Terry. wrote: > >> check your configure especially for: >> >> * notify/ also-notify/ allow-notify >> * allow-transfer >> * does slave named have the permittion to write to data dir? > > yes , salve can write. > > slave options; >   allo

Re: process of updating slave servers

2011-02-14 Thread donovan jeffrey j
On Feb 14, 2011, at 8:31 PM, Terry. wrote: > check your configure especially for: > > * notify/ also-notify/ allow-notify > * allow-transfer > * does slave named have the permittion to write to data dir? yes , salve can write. slave options; allow-transfer { 10.1.1.2; }; allow-notify {10

Re: help with views design

2011-02-14 Thread Sten Carlsen
Remember that each view is a separate server, that has a limited access (by the match-clients statement), these clients will see this server and NOT the other two servers. Likewise a client in the edu view match list will not see any of the other views (servers). This is not one server, where the

Re: BIND 9.7.3 is now available.

2011-02-14 Thread Terry.
2011/2/15 Mark Andrews : > > 9.7.3 > >     * BIND now builds with threads disabled in versions of NetBSD earlier >       than 5.0 and with pthreads enabled by default in NetBSD versions >       5.0 and higher. Also removes support for unproven-pthreads, >       mit-pthreads and ptl2. [RT #19203] L

BIND 9.8.0rc1 is now available.

2011-02-14 Thread Mark Andrews
Introduction BIND 9.8.0rc1 is the first release candidate of BIND 9.8. This document summarizes changes from BIND 9.7 to BIND 9.8. Please see the CHANGES file in the source code release for a complete list of all changes. Download The latest development versions of BIND 9 softwa

Re: process of updating slave servers

2011-02-14 Thread Terry.
check your configure especially for: * notify/ also-notify/ allow-notify * allow-transfer * does slave named have the permittion to write to data dir? Regards. 2011/2/15 donovan jeffrey j : > Greetings > > I have a new slave server. I edited my master, incremented the serial number > and reload

BIND 9.7.3 is now available.

2011-02-14 Thread Mark Andrews
Introduction BIND 9.7.3 is the current release of BIND 9.7. This document summarizes changes from BIND 9.7.1 to BIND 9.7.3. Please see the CHANGES file in the source code release for a complete list of all changes. Download The latest development version of BIND 9 software can a

process of updating slave servers

2011-02-14 Thread donovan jeffrey j
Greetings I have a new slave server. I edited my master, incremented the serial number and reloaded named. The master is fine, and contains the new entry but the slaves are still running the previous entries. what is the basic operation of updating a slave ? I reloaded the zone with rndc and t

Re: Strange error from nsupdate

2011-02-14 Thread Chris Thompson
On Feb 14 2011, Chris Buxton wrote: On Feb 14, 2011, at 6:31 AM, Chris Thompson wrote: We are running BIND 9.7.2-P3, and update our zones with nsupdate calls that look like this: nsupdate -v -k keys/update-key <[input] >/dev/null 2>[errors] This is run from a Solaris 10_x86 non-global "zone"

Re: multi-master with mysql backend

2011-02-14 Thread Warren Kumari
On Feb 14, 2011, at 12:54 PM, Torinthiel wrote: Dnia 2011-02-14 15:52 Mike Mitchell napisał(a): I'd keep two copies of the BIND config, one that has all the zones as "master", and one that has all the zones as "slave". When the master dies, run a little script on a slave that freezes the z

Re: Strange error from nsupdate

2011-02-14 Thread Chris Buxton
On Feb 14, 2011, at 6:31 AM, Chris Thompson wrote: > We are running BIND 9.7.2-P3, and update our zones with nsupdate calls > that look like this: > > nsupdate -v -k keys/update-key <[input] >/dev/null 2>[errors] > > This is run from a Solaris 10_x86 non-global "zone" (container). > > On a coup

Re: help with views design

2011-02-14 Thread Chris Buxton
Rather than dropping all records in the copied zone, just compute a difference and apply it to both views. Or perhaps you should examine why you are using views in the first place and decide if there is a better way to achieve this. Regards, Chris Buxton BlueCat Networks On Feb 13, 2011, at 7:

Re: multi-master with mysql backend

2011-02-14 Thread Gordon A. Lang
In case anyone is actually paying attention, I just re-read my own post, and I'd like to clarify my plural reference to the service addresses... I have one service address for DDNS and separate service address for zone transfers. So, technically we have to change two static host-routes, not just

Re: multi-master with mysql backend

2011-02-14 Thread Gordon A. Lang
FWIW, I feel compelled to chime in -- for those who haven't already begun to filter out this thread. We have many thousands of records (internally) in hundreds of zones, mostly dynamic. We have 8 DNS servers providing authoritative and recursive service to thousands of internal clients. All

Re: multi-master with mysql backend

2011-02-14 Thread Torinthiel
Dnia 2011-02-14 15:52 Mike Mitchell napisał(a): >I'd keep two copies of the BIND config, one that has all the zones as "master", and one that has all the zones as "slave". When the master dies, run a little script on a slave that freezes the zones, edits the SOA to make that server the MNAME

Re: multi-master with mysql backend

2011-02-14 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This is precisely how I'd do it but actually haven't bothered to do the work of setting up config files in advance. I should, because while it is an easy task, if I need to do it, I'm probably not in the mood to figure it out. Having multiple masters

Re: IXFR size limit?

2011-02-14 Thread Matthew Pounsett
On 2011/02/14, at 10:47, Matthew Pounsett wrote: > Is there, by any chance, a maximum size to the IXFRs BIND will send? I've > noticed an upstream server I slave from is being suspiciously consistent in > the number of records it sends per IXFR (86,450 plus or minus ~10 records). > The upstr

IXFR size limit?

2011-02-14 Thread Matthew Pounsett
Is there, by any chance, a maximum size to the IXFRs BIND will send? I've noticed an upstream server I slave from is being suspiciously consistent in the number of records it sends per IXFR (86,450 plus or minus ~10 records). The upstream server is part of an appliance, but fingerprints as BI

RE: multi-master with mysql backend

2011-02-14 Thread Mike Mitchell
I'd keep two copies of the BIND config, one that has all the zones as "master", and one that has all the zones as "slave". When the master dies, run a little script on a slave that freezes the zones, edits the SOA to make that server the MNAME and increment the serial, then thaws the zone. Swap

Re: multi-master with mysql backend

2011-02-14 Thread Bill Larson
On Feb 13, 2011, at 9:06 AM, fddi wrote: I do not know why you really don't liket this mysql solution. OK I am talking of a DNS for HA purposes for grid computing services for exampe, so DNS resolution must be always working at any cost. The David solution can be OK, but I want to be sure not

Re: additional empty zones

2011-02-14 Thread Matus UHLAR - fantomas
> > On 13.02.11 09:25, Mark Andrews wrote: > > > zone "xxx" { > > > type master; > > > database "_builtin empty "; > > > }; > In message <20110213155712.ga1...@fantomas.sk>, Matus UHLAR - fantomas writes: > > Nice, but is that documented enough so the behaviour won't change or get > > removed

Strange error from nsupdate

2011-02-14 Thread Chris Thompson
We are running BIND 9.7.2-P3, and update our zones with nsupdate calls that look like this: nsupdate -v -k keys/update-key <[input] >/dev/null 2>[errors] This is run from a Solaris 10_x86 non-global "zone" (container). On a couple of occasions it has generated the error dns_dispatch_getudp (

Re: Spurious "TYPE65534" at the end of a NSEC3, why?

2011-02-14 Thread Stephane Bortzmeyer
On Mon, Feb 14, 2011 at 10:37:57AM +0100, Stephane Bortzmeyer wrote a message of 10 lines which said: > I cannot reproduce it. Now, it works. Bug report sent to ISC [ISC-Bugs #23232] No, it is not fixed in recent BINDs. ___ bind-users mailing list

Re: bind 9.6.3 crashing on Freebsd 7.3

2011-02-14 Thread Joshua Frugé
On 02/11/2011 21:21, Terry. wrote: 2011/2/11 Joshua Frugé: running bind 9.6.3 installed from ports on Freebsd 7.3 (amd64) Getting this error in my local log 10-Feb-2011 21:12:13.711 general: rbtdb.c:1506: INSIST(((unsigned int)((&(node)->references)->refs)) == 0&& node->data == ((void *)0))

Re: multi-master with mysql backend

2011-02-14 Thread fddi
I will consider very much your hints. Thank you for your point of view and I would like to try What you suggested. Riccardo On 14/feb/2011, at 00:24, Doug Barton wrote: > On 2/13/2011 8:06 AM, fddi wrote: >> I do not know why you really don't liket this mysql solution. > > It isn't a matter o

Re: Spurious "TYPE65534" at the end of a NSEC3, why?

2011-02-14 Thread Stephane Bortzmeyer
On Mon, Feb 14, 2011 at 01:50:49PM +1100, Mark Andrews wrote a message of 40 lines which said: > I could reproduce it in 9.7.1-P1 by just adding a DNSKEY record at > the apex I cannot reproduce it. Any more detailed instructions? It will be more difficult to convince the people in charge of t

Re: multi-master with mysql backend

2011-02-14 Thread fddi
On 2/14/11 4:11 AM, Fajar A. Nugraha wrote: On Mon, Feb 14, 2011 at 6:24 AM, Doug Barton wrote: On 2/13/2011 8:06 AM, fddi wrote: I do not know why you really don't liket this mysql solution. It isn't a matter of "not liking" it. Given that you have steadfastly refused to answer any of the qu