Path: csiph.com!newsfeed.xs4all.nl!newsfeed9.news.xs4all.nl!feeder.usenetexpress.com!tr1.eu1.usenetexpress.com!news.uzoreto.com!news.etla.org!nntp-feed.chiark.greenend.org.uk!ewrotcd!usenet-its.stanford.edu!usenet.stanford.edu!not-for-mail
From: Evan Hunt <each@isc.org>
Newsgroups: comp.protocols.dns.bind
Subject: Re: /etc/bind.keys in a chrooted environment
Date: Thu, 23 Jul 2020 04:23:17 +0000
Lines: 11
Approved: bind-users@lists.isc.org
Message-ID: <mailman.752.1595478164.942.bind-users@lists.isc.org>
References: <0e03752f-9ce1-ff80-ee4b-14416e94cbde@suse.de> <41683619-f25c-29ff-f1b8-78bc8625858f@ripe.net> <d379bee3-e9e5-a9e8-49d9-b92a6bab34a3@suse.de> <20200723042317.GA34140@isc.org>
NNTP-Posting-Host: lists.isc.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Trace: usenet.stanford.edu 1595478203 2445 149.20.1.60 (23 Jul 2020 04:23:23 GMT)
X-Complaints-To: action@cs.stanford.edu
Cc: Anand Buddhdev <anandb@ripe.net>, bind-users@lists.isc.org
To: Josef Moellers <jmoellers@suse.de>
Return-Path: <each@isc.org>
X-Original-To: bind-users@lists.isc.org
Delivered-To: bind-users@lists.isc.org
Content-Disposition: inline
In-Reply-To: <d379bee3-e9e5-a9e8-49d9-b92a6bab34a3@suse.de>
X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mx.pao1.isc.org
X-BeenThere: bind-users@lists.isc.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: BIND Users Mailing List <bind-users.lists.isc.org>
List-Unsubscribe: <https://lists.isc.org/mailman/options/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=unsubscribe>
List-Archive: <https://lists.isc.org/pipermail/bind-users/>
List-Post: <mailto:bind-users@lists.isc.org>
List-Help: <mailto:bind-users-request@lists.isc.org?subject=help>
List-Subscribe: <https://lists.isc.org/mailman/listinfo/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=subscribe>
X-Mailman-Original-Message-ID: <20200723042317.GA34140@isc.org>
X-Mailman-Original-References: <0e03752f-9ce1-ff80-ee4b-14416e94cbde@suse.de> <41683619-f25c-29ff-f1b8-78bc8625858f@ripe.net> <d379bee3-e9e5-a9e8-49d9-b92a6bab34a3@suse.de>
Xref: csiph.com comp.protocols.dns.bind:16010

On Wed, Jul 22, 2020 at 03:30:28PM +0200, Josef Moellers wrote:
> If /etc/bind.keys contains some additional keys, this will not work ;-)

I see the question has already been answered, but I thought it might be
worth mentioning that /etc/bind.keys can *only* be used for the root zone;
any other domains listed there will be ignored. So, this would already not
work.

-- 
Evan Hunt -- each@isc.org
Internet Systems Consortium, Inc.