rndc refresh fails for signed zones

Thomas Schulz schulz at adi.com
Wed Dec 11 15:13:16 UTC 2013


> Hi!
> 
> # named -V
> BIND 9.9.3-rl.13204.02-P2
> 
> I have configured slave zones with inline signing:
> 
> zone "mydomain.at" {
>          type slave;
>          file "/etc/bind/mydomain.at";
>          masters { 1.2.3.4; };
>          key-directory "/etc/bind/keys";
>          auto-dnssec maintain;
>          inline-signing yes;
>          allow-transfer { 5.6.7.8; };
>          also-notify { 5.6.7.8; };
> };
> 
> 
> # rndc refresh mydomain.at
> rndc: 'refresh' failed: failure
> not a slave or stub zone
> 
> 
> For normal slave zones (unsigned) it works fine. Is this a known bug?
> Where can I open a bug report? Any workarounds?

I believe that only the master can sign the zone.
Also, also-notify does not make much sense for a slave.

Tom Schulz
Applied Dynamics Intl.
schulz at adi.com


More information about the bind-users mailing list