Hello List, we use PowerDNS in a Master/Slave (Supermaster) setup with Postgresql backend and sync the zones with AXFR.
We have two zones on the master (foobar.ch and dev.foobar.ch) now we want to enable DNSSEC. This also works including AXFR to the slave servers. However, we get the following error message on the slave server (4.5.3) during check-all-zones: [Warning] 'dev.foobar.ch|RRSIG' in zone 'foobar.ch' is occluded by a delegation at 'dev.foobar.ch' [Error] Following record is auth=1, run pdnsutil rectify-zone?: dev.foobar.ch IN RRSIG DS 13 3 3600 20220224000000 20220203000000 52845 foobar.ch 5PqTMYVoR4tMXMGSyzQ9ZOP3oMHeWTzb/T5I8eugX/WhdbkeS33ZDr1vIfU8g81c/js1nXCx0/dgfRLqz43Z2g== Checked 16 records of 'foobar.ch', 1 errors, 1 warnings. does anyone have an idea how we can solve the problem? Thanks, Ben --
pgpLXHb1_qMo2.pgp
Description: OpenPGP digital signature
_______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users
