moving DNSSEC to a hidden master

[Alan Clegg]

On Oct 14, 2013, at 7:43 PM, Alan Clegg <alan at clegg.com> wrote:

> == Commands typed ==
> root at server00:/etc/namedb# ls
> bind.keys  keys  master  named.conf  rndc.key
> root at server00:/etc/namedb# cd master
> root at server00:/etc/namedb/master# ls
> example.com  example.com.jbk  example.com.signed  example.com.signed.jnl
> root at server00:/etc/namedb/master# vi example.com
> root at server00:/etc/namedb/master# rndc reload example.com
> zone reload queued
> root at server00:/etc/namedb/master# 

And, I get the following after the signing happens:

root at server00:/etc/namedb/master# ls -al
total 32
drwxr-xr-x 2 root root 4096 Oct 14 17:49 .
drwxr-xr-x 4 root root 4096 Oct 14 17:38 ..
-rw-r--r-- 1 root root  135 Oct 14 17:39 example.com
-rw-r--r-- 1 root root  512 Oct 14 17:31 example.com.jbk
-rw-r--r-- 1 root root  723 Oct 14 17:39 example.com.jnl
-rw-r--r-- 1 root root 2245 Oct 14 17:49 example.com.signed
-rw-r--r-- 1 root root 4730 Oct 14 17:39 example.com.signed.jnl
root at server00:/etc/namedb/master# 

AlanC
-- 
Alan Clegg | +1-919-355-8851 | alan at clegg.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20131014/c97134c2/attachment.bin>