5 files in a single directory will make difficult for any
filesystem. I would recommend breaking that out into groups of less
than 1 per directory. For better performance, separate them onto
directories that are on different spindles; the parallelization of
seek (and with thousands of small
On 2/27/2011 1:15 AM, Dennis Perisa wrote:
> Thanks Doug. Yes, helps a lot. And yes, this is to handle adding new
> zones.
Look into BIND 9.7.2 or newer and the "rndc addzone" capabilities.
Solves the problem without needing to reload/restart/reconifg at all.
AlanC
signature.asc
Description
hello bind network
I just installed bind 9.7.3 version and I just noticed that the areas
have been modified by the rpm ( i think ).
they seem to have greater respect for the standards was the previous
version uses version 9.7.0-6.p2 depositing rpm centos testing
they are reading that you advise
Den 28. feb. 2011 kl. 17.46 skrev fakessh @:
> for example the test shows me some time
> http://dnssec-debugger.verisignlabs.com/nicolaspichot.fr the results are
> not consistent with my expectations
Well, I see a few different errors for that domain:
I don't see any DS records for your domain w
On Thu, 24 Feb 2011, Antonio Querubin wrote:
Has anyone come up with scripts/tools for removing stale zone-signing keys
but leaving key-signing keys which are in the same directory alone?
Take a look at http://seatpost.its.uiowa.edu/bind_stuff/
It's a collection of scripts for dealing with rou
Eivind Olsen wrote:
Well, I see a few different errors for that domain:
I don't see any DS records for your domain when I query the fr.
> nameservers. I don't know how it's handled in that TLD but I guess
> you somehow need to tell your registrar about your KSK, so they
can put in the correc
On 2011.02.28 00.20, Evan Hunt wrote:
if i comment out dnssec-lookaside, or the chaos view, things seem to work
ok. i'm wondering what i can do to further diagnose what is happening.
below is my configuration, with the (presumably) uninteresting bits
removed. i'm using 9.7.1, courtesy of ubuntu
> even with dnssec-lookaside auto; only in the non-chaos view stanzas, it
> seems to still want to do something relating to the chaos view:
Ah well, thanks for checking. Turns out managed keys cross-link between
the views incorrectly. There's a fix in review, I'll send you a patch
later today.
Recap:
running named with "-n 1" will spin up one worker thread
and approx 4 other threads.
Is there an official discussion or explanation of what these
other threads do?
--
Thanks
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.
Le lundi 28 février 2011 à 20:14 +0100, Laurent Bauer a écrit :
> Eivind Olsen wrote:
> >
> > Well, I see a few different errors for that domain:
> >
> > I don't see any DS records for your domain when I query the fr.
> > nameservers. I don't know how it's handled in that TLD but I guess
> >
server1:/var/cache/bind# dig ox.test.nsbeta.info ns @localhost +short
# got nothing here
server1:/var/cache/bind# dig ox.test.nsbeta.info ns @localhost
; <<>> DiG 9.6-ESV-R3 <<>> ox.test.nsbeta.info ns @localhost
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOER
On 03/01/11 04:55, terry wrote:
> server1:/var/cache/bind# dig ox.test.nsbeta.info ns @localhost +short
>
> # got nothing here
>
>
> server1:/var/cache/bind# dig ox.test.nsbeta.info ns @localhost
>
> ; <<>> DiG 9.6-ESV-R3 <<>> ox.test.nsbeta.info ns @localhost
> ;; global options: +cmd
> ;; Got
>
> +short instructs dig to only write extract of ANSWER section. your reply
> is in authorative section.
> Torinthiel
>
>
Thanks. That's right.
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
13 matches
Mail list logo
