[prev in list] [next in list] [prev in thread] [next in thread]
List: pdns-users
Subject: Re: [Pdns-users] "GSQLBackend unable to list metadata" with dnssec disabled?
From: Aki Tuomi <cmouse () youzen ! ext ! b2 ! fi>
Date: 2014-11-04 15:24:09
Message-ID: 20141104152409.GB13359 () pi ! ip ! fi
[Download RAW message or body]
On Tue, Nov 04, 2014 at 03:53:47PM +0100, Oli Schacher wrote:
> On Tue, 4 Nov 2014 16:02:43 +0200
> Aki Tuomi <cmouse@youzen.ext.b2.fi> wrote:
>
> > On Tue, Nov 04, 2014 at 02:32:34PM +0100, Oli Schacher wrote:
> > > On Tue, 4 Nov 2014 15:10:28 +0200
> > > Aki Tuomi <cmouse@youzen.ext.b2.fi> wrote:
> > > >
> > > > Domain table is consulted in some cases, not metadata. You need to
> > > > fix those queries as well, and permit read access to the domains
> > > > table.
> > > >
> > > > Aki
> > >
> > > Which additional queries do I have to fix? The documentation on
> > > http://doc.powerdns.com/html/generic-mypgsql-backends.html states
> > > that only the basic queries are used if I don't enable features like
> > > dnssec and master/slave.
> > >
> > > Of course I could just override all queries listed there, but I'd
> > > really like to know why this configuration works on two servers but
> > > not on the third. Could you give an example situation which would
> > > cause the domains table to be queried and cause this error?
> > >
> > > Thanks
> > > Oli
> > >
> >
> > Look at the
> >
> > # gmysql-get-all-domains-query Retrieve all domains
> > # gmysql-get-all-domains-query=select domains.id, domains.name,
> > records.content, domains.type, domains.master,
> > domains.notified_serial, domains.last_check from domains LEFT JOIN
> > records ON records.domain_id=domains.id AND records.type='SOA' AND
> > records.name=domains.name WHERE records.disabled=0 OR %d #
> > gmysql-info-zone-query=select
> > id,name,master,last_check,notified_serial,type from domains where
> > name='%s'
> >
> > i'm pretty sure it's one of these.
>
> Changing these didn't help, same error. I enabled the query log on
> the mysql server which shows powerdns running the following
> query:
>
> select content from domains, domainmetadata where
> domainmetadata.domain_id=domains.id and name='<munged>' and
> domainmetadata.kind='SOA-EDIT'
>
> This corresponds to the "get-domain-metadata-query" setting. The doc
> on metadata however states: "Domain metadata is only available for
> DNSSEC capable backends! Make sure to enable the proper '-dnssec'
> setting to benefit, and to have performed the DNSSEC schema update."
>
> I did not enable gmysql-dnssec - so why is pdns trying to run this
> query?
>
Apparently this has been changed in latest version, and documentation
has not been updated to reflect this change. Sorry about this.
Aki
>
> --
> message transmitted on 100% recycled electrons
>
> _______________________________________________
> Pdns-users mailing list
> Pdns-users@mailman.powerdns.com
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
>
_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
http://mailman.powerdns.com/mailman/listinfo/pdns-users
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic