From: Pieter Lexis Date: Wed, 18 Nov 2015 15:07:58 +0000 (+0100) Subject: Add a note on slave domains and bind-dnssec-db X-Git-Tag: dnsdist-1.0.0-alpha1~210^2~18^2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F2908%2Fhead;p=thirdparty%2Fpdns.git Add a note on slave domains and bind-dnssec-db --- diff --git a/docs/markdown/authoritative/backend-bind.md b/docs/markdown/authoritative/backend-bind.md index 3c712ade89..3b662e0477 100644 --- a/docs/markdown/authoritative/backend-bind.md +++ b/docs/markdown/authoritative/backend-bind.md @@ -32,6 +32,9 @@ How often to check for zone changes. See 'Operation' section. ### `bind-dnssec-db` Filename to store and access our DNSSEC metadatabase, empty for none. +To slave DNSSEC-enabled domains (where the RRSIGS are in the AXFR), a +`bind-dnssec-db` is required. This is because the [PRESIGNED](domainmetadata.md#presigned) +domain metadata is set during the zonetransfer. ### `bind-hybrid` Store DNSSEC keys and metadata storage in an other backend. See the