From 8f825254001e04b74b5ff780e2aba8215260076f Mon Sep 17 00:00:00 2001 From: Pieter Lexis Date: Wed, 18 Nov 2015 16:07:58 +0100 Subject: [PATCH] Add a note on slave domains and bind-dnssec-db --- docs/markdown/authoritative/backend-bind.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/markdown/authoritative/backend-bind.md b/docs/markdown/authoritative/backend-bind.md index 3c712ade8..3b662e047 100644 --- a/docs/markdown/authoritative/backend-bind.md +++ b/docs/markdown/authoritative/backend-bind.md @@ -32,6 +32,9 @@ How often to check for zone changes. See 'Operation' section. ### `bind-dnssec-db` Filename to store and access our DNSSEC metadatabase, empty for none. +To slave DNSSEC-enabled domains (where the RRSIGS are in the AXFR), a +`bind-dnssec-db` is required. This is because the [PRESIGNED](domainmetadata.md#presigned) +domain metadata is set during the zonetransfer. ### `bind-hybrid` Store DNSSEC keys and metadata storage in an other backend. See the -- 2.50.0