Re: Problem with zone rsigning in 9.7.0

2010-03-24 Thread Roy Badami
> All keys were available to BIND, and the zone was successfully > resigned just by running dnssec-signzone over the zone with no > arguments (except for the zone file name). Hmm, sorry to have posted prematurely - it looks like all keys were *not* available to BIND due to file ownership issues, b

Problem with zone rsigning in 9.7.0

2010-03-24 Thread Roy Badami
I have a zone which is DNSSEC signed and is configured as a dynamic zone (although in practice dynamic updates are not normally used on this zone). AIUI BIND 9.7.0 should automatically resign the zone as required as long as the keys are available to it. However, what I actuallly found is that alt