[bind] ajout de la validation dnssec

Ignore-this: 7b95172a7151d8afb3875992248e5b3a

darcs-hash:20121101170635-3a55a-bd99f5e9f354cd835956e1a4b9ff625e574633e9.gz

Python/etc/bind/named.conf

@@ -0,0 +1,23 @@
+# -*- mode: python; encoding: utf-8 -*-
+
+info["owner"] = "root"
+info["group"] = "bind"
+info["perms"] = 0644
+
+comment_start = "//"
+
+header("Conf de base de Bind9")
+
+@// This is the primary configuration file for the BIND DNS server named.
+@//
+@// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
+@// structure of BIND configuration files in Debian, *BEFORE* you customize
+@// this configuration file.
+@//
+@// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+
+if has("dnssec-validation"):
+    @include "/etc/bind/bind.keys";
+@include "/etc/bind/named.conf.options";
+@include "/etc/bind/named.conf.local";

Python/etc/bind/named.conf.options

@@ -52,5 +52,9 @@ if not has("dns-secondary-no-forward"):
     @    // traitement automatique pour la connexion de secours
     @    // (ligne decommentee automatiquement en mode secours)
     @//  forwarders { 138.231.136.14; } ; #POUR SECOURS
-@};
 
+if has("dnssec-validation"):
+    @    dnssec-enable yes;
+    @    dnssec-validation yes;
+
+@};

Python/etc/bind/rndc.key

@@ -1,6 +1,6 @@
 include("secrets")
 
-info["owner"] = "root"
+info["owner"] = "bind"
 info["group"] = "bind"
 info["perms"] = 0640