Can we stop emitting an error for managed-keys.bind?
Doug Barton
dougb at dougbarton.us
Wed Jan 25 05:54:06 UTC 2012
Thanks Mark and Evan for the responses. I think that's the right solution.
For fun I just tried started named with no options and an empty
named.conf. The other error that happens with that (lack of
configuration) is:
<daemon.warn> named[10741]: Warning:
'empty-zones-enable/disable-empty-zone' not set: disabling RFC 1918
empty zones
Shouldn't that just be enabled by default? We don't see that in FreeBSD
because I disable some by default to include larger covering zones with
real zone statements.
Doug
On 01/24/2012 19:51, Mark Andrews wrote:
> It's debug=1 with the current code.
>
> if (zone->type == dns_zone_key &&
> result == ISC_R_FILENOTFOUND)
> level = ISC_LOG_DEBUG(1);
>
> In message <4F1F7883.2010107 at dougbarton.us>, Doug Barton writes:
>> I know that this has come up in the past, but it came up again, so here
>> I go again. :)
>>
>> If you do not enable dnssec (I hesitate to say "by default," but I
>> believe it is accurate) you get the following:
>>
>> <daemon.err> named[10001]: managed-keys-zone ./IN: loading from master
>> file managed-keys.bind failed: file not found
>>
>> That shouldn't be an error message, since named isn't actually going to
>> use the file. The error message itself causes unnecessary user
>> confusion. If there is general agreement that this error shouldn't be
>> printed I'm happy to raise a bug about it.
>>
>>
>> Thanks,
>>
>> Doug
>>
>> --
>>
>> It's always a long day; 86400 doesn't fit into a short.
>>
>> Breadth of IT experience, and depth of knowledge in the DNS.
>> Yours for the right price. :) http://SupersetSolutions.com/
>>
>> _______________________________________________
>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>> from this list
>>
>> bind-users mailing list
>> bind-users at lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
--
It's always a long day; 86400 doesn't fit into a short.
Breadth of IT experience, and depth of knowledge in the DNS.
Yours for the right price. :) http://SupersetSolutions.com/
More information about the bind-users
mailing list