adding DS record via nsupdate

Marc Lampo marc.lampo.ietf at gmail.com
Wed Feb 6 13:29:11 UTC 2013


Precisely !

That is why one of the sanity checks is if NS records exist at all.
If not, no DS records will be added.

And reversely : if all NS records are removed, any DS record will be
removed as well.

Just as Mark Andrews indicated.

Kind regards,

Marc Lampo

On Wed, Feb 6, 2013 at 9:59 AM, Phil Mayers <p.mayers at imperial.ac.uk> wrote:
> On 02/06/2013 12:56 AM, Doug Barton wrote:
>
>>> I do the following as an example:
>>>
>>> nsupdate -d
>>> server <ip addr>
>>> zone test.net
>>> update add subzone.test.net 9999 IN DS 34845 7 1
>>> 325AA7B83FAC7DB621678EB2FB9035B51A0A504F
>>
>>
>> I don't think this makes sense. Shouldn't you have a proper zone for
>> subzone.test.net? What utility would a DS record have in this location?
>>
>
> Eh? DS records always live in the parent zone, exactly like delegating NS
> records.
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users



More information about the bind-users mailing list