[Pdns-users] Slave Zones and Presigned Zones

2011-06-08 Thread Craig Whitmore
Is there anyway to make presigned-zones on slaves the default. I have supermasters on all my slaves and they get updates automatically but after the initial transfer it does I have to log into the slave and run pdnssec set-presigned domain.com for every domain on the slave. As I want the slaves to

[Pdns-users] DNSSEC slave: TSIG/RRSIG interaction?

2011-06-08 Thread Christof Meerwald
Hi, just tried adding some TSIG stuff for AXFRs to my PowerDNS configuration and now my slave PowerDNS keeps saying (every hour): Domain cmeerw.priv.at is fresh, but RRSIGS differ, so DNSSEC stale It looks like when using TSIG PowerDNS doesn't return any RRSIG records for a SOA request. This the

Re: [Pdns-users] PowerDNSSEC Slaves

2011-06-08 Thread Craig Whitmore
On 8/06/11 11:38 PM, "Christof Meerwald" wrote: >On Wed, 08 Jun 2011 18:21:14 +1200, Craig Whitmore wrote: >[...] >> Can someone help why the slave is failing=8A > >I think one of the DNSSEC records is being truncated on the slave as >it exceeds 256 bytes - you might need to update the database

Re: [Pdns-users] PowerDNSSEC Slaves

2011-06-08 Thread Christof Meerwald
On Wed, 08 Jun 2011 18:21:14 +1200, Craig Whitmore wrote: [...] > Can someone help why the slave is failing=8A I think one of the DNSSEC records is being truncated on the slave as it exceeds 256 bytes - you might need to update the database schema on the slave to allow for longer records. > I can