Re: NSD, subdomains, and DS records

"W.C.A. Wijngaards" <[email protected]>
Newsgroups gmane.network.dns.nsd.general
Message-ID <[email protected]>
Hi PG,

NSD parses the zone to find zonecuts with the NS records.  This is what
triggers DS record special processing later on.  The NS records from
sub.zone.com are missing from the zone.com zonefile, i.e.
sub.zone.com. IN NS localhost.

Yes your instinct is correct, but it has special processing for the DS
record for sub.zone.com; which has to be in the 'zone.com' zonefile, by
the way.

Best regards, Wouter

On 16/01/17 15:48, Ascendant Technologies wrote:
> Hello!
> 
> Possibly a newbie error, but one I've been fighting with long enough to
> reach out.
> 
> Start with blank 4.1.10 installation, create a zone "zone.com", populate
> with a DS
> record (created with ldns-key2ds) for "sub.zone.com".
> 
> Running "host -t ds zone.com localhost" returns correct record.
> 
> Now add a zone record for "sub.zone.com" in "nsd.conf" and while the
> subdomain
> records are properly returned, the DS record no longer is.  Remove the
> zone entry
> alone, and the DS record returns (no change to parent zone).
> 
> My instinct says as soon as NSD finds zone entry for "sub.zone.com" it
> obviates
> parsing by the parent, thus hiding the DS record.
> 
> I'll try any suggestions, so fire away.
> 
> Thanks bunches
> 
> pg
> 
> 
> 
> 
> _______________________________________________
> nsd-users mailing list
> [email protected]
> https://open.nlnetlabs.nl/mailman/listinfo/nsd-users
>

_______________________________________________
nsd-users mailing list
[email protected]
https://open.nlnetlabs.nl/mailman/listinfo/nsd-users
signature.asc (application/pgp-signature, 819 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=nH7P
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.