Re: NSD, subdomains, and DS records
"W.C.A. Wijngaards" <[email protected]>
| Newsgroups | gmane.network.dns.nsd.general |
|---|---|
| Message-ID | <[email protected]> |
Hi PG, NSD parses the zone to find zonecuts with the NS records. This is what triggers DS record special processing later on. The NS records from sub.zone.com are missing from the zone.com zonefile, i.e. sub.zone.com. IN NS localhost. Yes your instinct is correct, but it has special processing for the DS record for sub.zone.com; which has to be in the 'zone.com' zonefile, by the way. Best regards, Wouter On 16/01/17 15:48, Ascendant Technologies wrote: > Hello! > > Possibly a newbie error, but one I've been fighting with long enough to > reach out. > > Start with blank 4.1.10 installation, create a zone "zone.com", populate > with a DS > record (created with ldns-key2ds) for "sub.zone.com". > > Running "host -t ds zone.com localhost" returns correct record. > > Now add a zone record for "sub.zone.com" in "nsd.conf" and while the > subdomain > records are properly returned, the DS record no longer is. Remove the > zone entry > alone, and the DS record returns (no change to parent zone). > > My instinct says as soon as NSD finds zone entry for "sub.zone.com" it > obviates > parsing by the parent, thus hiding the DS record. > > I'll try any suggestions, so fire away. > > Thanks bunches > > pg > > > > > _______________________________________________ > nsd-users mailing list > [email protected] > https://open.nlnetlabs.nl/mailman/listinfo/nsd-users > _______________________________________________ nsd-users mailing list [email protected] https://open.nlnetlabs.nl/mailman/listinfo/nsd-users
signature.asc
(application/pgp-signature, 819 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJYfN8UAAoJEJ9vHC1+BF+NwPoQAJJxYdJDp1SZ7endjXLnawEw Nbc21PvF9iNBNIboYSTB4JJ0zs9mq/W+8pham6oPzLdjnyZ71/cQFRzTu60GRM66 P1MwpNMTo1xxJMMMBKyIwVm5qoc/mIc0+kdXdWU3BS2fIBbY4d6nz7wTcrdwmbMQ Ph+5b7ouLA/stRqDapuLtaIKFfSjHuxQMOvfM1dw/g5eJhw7CttpS9ql/spDGV2n nxXxbFgNCvv6XgbzYJO83L2I/embmIJMPpz+VZ4rWEr1GhBxt596ceaoJXk540DD li+jPz2TDPsfvrb9TxAANAwqo7mXALVrLYMUKK27SS+sQZnSeqJd0A7qtfyVqd9n WxBdfmbddc7a41Tv1pba6ixn93FZo+hmd7l5ympq+svYaimwyQyG9yHFHaRNKplj hsgvCDRhHLxpPMY+sycLVDGVM7tzXEqIKG2jfbVVb9UYDihgT2lldijeG4n51BE2 aAhIphQnB0+oIS303PLuxZUj0DxgYmxewp4gDs1Ueyf3YXPhk/0FYDqNzVzmr9ob NMv8ki7/xo9vE4N57S3OYeACCDd+bmDEt76cM+dpXVfsyhqBrkhMDGCsil2QVFFY w4NZh5AFBOho5srFJyAVqQPWimuW8EAaQPAJP7D+ulQHDljZADKsn2yppXkobog3 NTujfjEnKjuBmHxsPehI =nH7P -----END PGP SIGNATURE-----