BIND 9.4-ESV-R5b1 is now available

2011-05-12 Thread Mark Andrews
Introduction BIND 9.4-ESV-R5b1 is a beta release of BIND 9.4-ESV-R5. Download The latest development version of BIND 9 software can always be found on our web site at http://www.isc.org/downloads/development. There you will find additional information about each release, source code

BIND 9.7.4b1 is now available

2011-05-12 Thread Mark Andrews
Introduction BIND 9.7.4b1 is a beta release of BIND 9.7.3. Download The latest development version of BIND 9 software can always be found on our web site at http://www.isc.org/downloads/development. There you will find additional information about each release, source code, and s

Re: Primary Server Name Change

2011-05-12 Thread Mark Andrews
In message <4dcc225f.8000...@obsd.us>, CT writes: > Primary Name server > bind- 9.7.3 > OS- CentOS 5.6 > Authoritative for 2 zones using DNSSEC > > This may be an obvious question but I will ask anyway.. :) > > I want to change the name of the server > from > old.zone1.com > to > new.zon

Once again.. :) Primary Server Name Change

2011-05-12 Thread CT
I accidentally borked the previous post.. Primary Name server bind- 9.7.3 OS- CentOS 5.6 This may be an obvious question but I will ask anyway.. :) I want to do a name change on the Primary for 2 zones using DNSSEC - zone1 - zone2 - Old name - old.zone1.com - New Name - new.zone2.com -

Re: Primary Server Name Change

2011-05-12 Thread Kevin Darcy
On 5/12/2011 3:21 PM, Michelle Konzack wrote: Hello CT, Am 2011-05-12 13:09:35, hacktest Du folgendes herunter: Primary Name server bind- 9.7.3 OS- CentOS 5.6 Authoritative for 2 zones using DNSSEC This may be an obvious question but I will ask anyway.. :) I want to change the name of

Delegating subzone of a not valid domain.

2011-05-12 Thread Samuel Abreu de Paula
Hi, in my lan domain im trying to delegate subzones to others name servers, but im failing hard. Lets say domain "acme": ns1.acme server, file acme.zone: $TTL604800 @ IN SOA ns1.acme. admin.acme. ( 19 ; Serial

Re: Primary Server Name Change

2011-05-12 Thread Michelle Konzack
Hello CT, Am 2011-05-12 13:09:35, hacktest Du folgendes herunter: > Primary Name server > bind- 9.7.3 > OS- CentOS 5.6 > Authoritative for 2 zones using DNSSEC > > This may be an obvious question but I will ask anyway.. :) > > I want to change the name of the server > from > old.zone1.co

Primary Server Name Change

2011-05-12 Thread CT
Primary Name server bind- 9.7.3 OS- CentOS 5.6 Authoritative for 2 zones using DNSSEC This may be an obvious question but I will ask anyway.. :) I want to change the name of the server from old.zone1.com to new.zone2.com IP Address - no change - change soa in master zone files - work w

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Mark Andrews
In message , Juergen Dietl writes: > --90e6ba6134ba89740204a312cb5f > Content-Type: text/plain; charset=ISO-8859-1 > > Hello Phil, Hello Mark, > > after trying a lot the last hours I came to the same result. > > grant EXAMPLE.COM ms-self * any; > > works. All the other things for example EXAM

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Juergen Dietl
2011/5/12 Mark Andrews > > > > I suggest that you look at the documentation for "external" and use > it. > > Hello Mark, thanx a lot for your explanation. One last question. What do you mean with your sentence above? Do you mean that?: +++ external Th

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Mark Andrews
In message , Juergen Dietl writes: > --20cf30549e9f7b6a2604a30ffc67 > Content-Type: text/plain; charset=ISO-8859-1 > > Hello Mark, > > thanx a lot for your feedback. > > the rule that works at the moment for only ONE client: > > grant WS-YBCL150939\$\@EXAMPLE.TEST subdomain example.test. ANY;

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Juergen Dietl
Hello Phil, Hello Mark, after trying a lot the last hours I came to the same result. grant EXAMPLE.COM ms-self * any; works. All the other things for example EXAMPLE.COM krb5-self * any; etc. dont work. So I will put this rule in any zone with the relating domain. The ms-self command is not do

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Phil Mayers
On 12/05/11 09:33, Juergen Dietl wrote: Hello Mark i am not that professional in bind. Normally I am a CISCO expert but now I also do the bind for 6 months. I cannot imagine why this post should help me. It doesn't really. You should only need this: grant EXAMPLE.COM ms-self * any; What

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Juergen Dietl
Hi Nicholas, thanx for your hint but unfortunately it gets also a refuse. cheers, 2011/5/11 Nicholas F Miller > Try: > > grant EXAMPLE.TEST subdomain EXAMPLE.TEST ANY; > _ > Nicholas Miller, ITS, University of Colorado at Boulder > > > >

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Juergen Dietl
Hello Mark i am not that professional in bind. Normally I am a CISCO expert but now I also do the bind for 6 months. I cannot imagine why this post should help me. What do this match-type "external" mean? I am not aware of running any external daemon. Or was this just for the ACLs problem from Ph

Re: GSS-TSIG update policy identity field

2011-05-12 Thread Juergen Dietl
Hello Mark, thanx a lot for your feedback. the rule that works at the moment for only ONE client: grant WS-YBCL150939\$\@EXAMPLE.TEST subdomain example.test. ANY; Because bind support both it should also work with: grant ws-ybcl150...@example.test subdomain example.test. ANY; right? But for