bad cache hit
Bryton
bryton at tznic.or.tz
Fri Nov 25 09:25:36 UTC 2011
Hi,
I am having a problem,
I am signing a zone with opendnssec,
After signing it seems fine and
If issue a
*dig @[dnssec-aware-recursive-server] [zone] +dnssec SOA*
from this [*dnssec-aware-recursive-server*]
And the answer is returned with RRSIGS and ad bit
But after some time if I issue again i get SERVFAIL and checking the
logs i get this
25-Nov-2011 09:16:09.111 debug 3: validating @0xb93ccf28: zone SOA: starting
25-Nov-2011 09:16:09.111 debug 3: validating @0xb93ccf28: zone SOA:
attempting positive response validation
25-Nov-2011 09:16:09.111 info: validating @0xb93ccf28: zone SOA: bad
cache hit (zone/DNSKEY)
25-Nov-2011 09:16:09.111 debug 3: validator @0xb93ccf28:
dns_validator_destroy
But after sometime again i get good results with no error
I wonder if anyone has ever got the error
I have checked dig +cd and i get answers perfectly so I suppose its
dnssec issue
and i have checked if the RRSIG are expired and its not the case as they
are not even close to expiry.
I will appreciate.
--
[ Bryton | Systems Engineer | .tzNIC | www.tznic.or.tz ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20111125/ca7729a3/attachment.html>
More information about the bind-users
mailing list