bind9.9.0rc2 inline signing tests

2012-01-31 Thread Spain, Dr. Jeffry A.
I compiled and installed bind 9.9.0 rc2 on Ubuntu Oneiric x64. The zone jaspain.net used for testing was configured as a master zone with update-policy local, auto-dnssec maintain, and inline-signing yes. I tested by making changes to the unsigned zone, and used named-checkzone to output the

Re: bind9.9.0rc2 inline signing tests

2012-01-31 Thread Evan Hunt
Thank you for the testing! 2. Prior to the second test, in an attempt to get rid of the journal files, I issued the command rndc sync -clear jaspain.net. This generated an error rndc: 'sync' failed: unknown class/type. I found that rndc sync and rndc sync jaspain.net both worked, so I think

RE: BIND 9.8.1-P1:'make test' fails

2012-01-31 Thread TAN BUI
On No.v 22, 2011 Niall O'Reilly wrote: Since quite a few years, I habitually run 'make test' after building BIND from sources. I'me seiing a failure with 9.8.1-P1, and wonder whether anyone else is also. I got exactly the same error messages when testing xfer as well. We are running Linux

RE: bind9.9.0rc2 inline signing tests

2012-01-31 Thread Spain, Dr. Jeffry A.
It's supposed to be rndc sync -clean, not -clear. I thought we'd fixed that, darn it... Thanks. rndc sync -clean jaspain.net works and does remove the journal files. Jeff ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to

RE: bind9.9.0rc2 inline signing tests

2012-01-31 Thread Spain, Dr. Jeffry A.
2. Prior to the second test, in an attempt to get rid of the journal files, I issued the command rndc sync -clear jaspain.net. This generated an error rndc: 'sync' failed: unknown class/type. I found that rndc sync and rndc sync jaspain.net both worked, so I think rndc just doesn't

Re: BIND 9.8.1-P1:'make test' fails

2012-01-31 Thread Mark Andrews
In message pine.lnx.4.64.1201311256380.12...@alcor.concordia.ca, TAN BUI writ es: On No.v 22, 2011 Niall O'Reilly wrote: Since quite a few years, I habitually run 'make test' after building BIND from sources. I'me seiing a failure with 9.8.1-P1, and wonder whether anyone else is also. I

Re: bind9.9.0rc2 inline signing tests

2012-01-31 Thread Mark Andrews
In message 7610864823c0d04d89342623a3adc9de2e2f0...@hopple.countryday.net, S pain, Dr. Jeffry A. writes: As I read RFC 1035, domain names can't begin with a hyphen, so rndc should in theory be able to correctly discern this error. Hostnames can't begin with a hyphen (RFC 952). Domain names

BIND 9.9.0 RC2 -- call for testing

2012-01-31 Thread Michael Graff
As Evan mentioned earlier, we are coming close to releasing a final BIND 9.9.0. It's scheduled to go to our Forum members on the 7th of February and as a public release about a week later. Some inline signing defects were resolved earlier this week, and we've released 9.9.0RC2. This release

Re: BIND 9.8.1-P1:'make test' fails

2012-01-31 Thread /dev/rob0
On Tue, Jan 31, 2012 at 01:13:54PM -0500, TAN BUI wrote: On No.v 22, 2011 Niall O'Reilly wrote: Go back just a bit further in the archive to my post on 2011-11-17 (16th in my TZ) Subject: Re: Can't compile bind 9.8.1-P1 on Solaris. Sorry, I should have changed the subject to indicate

Newbie help - slave servers and dns updates

2012-01-31 Thread Wayne Merricks
Hi all, Please excuse my ignorance but after spending several weeks Googling for information that would have endangered several rain forests in paper form, I've decided to ask for some help. I successfully setup two Bind9 servers in the usual master (DNS1), slave (DNS2) configuration to serve

Re: BIND 9.9.0 RC2 -- call for testing

2012-01-31 Thread Doug Barton
On 01/31/2012 16:06, Michael Graff wrote: Some inline signing defects were resolved earlier this week, and we've released 9.9.0RC2. This release candidate includes fixes for all major defects reported in inline signing and other features. I haven't seen a public announcement about this yet

RE: BIND 9.9.0 RC2 -- call for testing

2012-01-31 Thread Howard Leadmon
I will grab the port update in a few, and give it a run..Worked overnight last night, so hadn't had a chance to grab the sources, so great timing for me.. --- Howard Leadmon -Original Message- From: bind-users-bounces+howard=leadmon@lists.isc.org [mailto:bind-

BIND 9.9.0rc2 is now available

2012-01-31 Thread Michael McNally
Introduction BIND 9.9.0rc2 is the second release candidate for BIND 9.9.0 This document summarizes changes from BIND 9.8 to BIND 9.9. Please see the CHANGES file in the source code release for a complete list of all changes. Download The latest versions of

RE: bind9.9.0rc2 inline signing tests

2012-01-31 Thread Spain, Dr. Jeffry A.
Hostnames can't begin with a hyphen (RFC 952). Domain names can start with anything. I guess that makes the syntax rndc sync [-clean] [zone [class [view]]] unavoidably ambiguous. Maybe a way around this would be a new command rndc clean [zone [class [view]]]. Jeffry A. Spain Network

Permissions change after running dnssec-settime bind 9.9.0rc2

2012-01-31 Thread Spain, Dr. Jeffry A.
I ran dnssec-settime from bind 9.9.0rc2 today to change the metadata on two of my ZSKs. Before running dnssec-settime, using one of these keys as an example, the file permissions were: -rw-r--r-- 1 root bind 535 2012-01-31 11:47 Kjaspain.us.+005+30795.key -rw-r- 1 root bind 1058