On Fri, Feb 27, 2015 at 2:18 PM, bert hubert
wrote:
> On Fri, Feb 27, 2015 at 02:15:12PM -0800, Mark Moseley wrote:
> > We don't do a lot (or practically any) AXFRs, so I hadn't noticed this
> > before now.
>
> Hi Mark,
>
> You probably have something in the database that upsets us (which should
On Fri, Feb 27, 2015 at 02:15:12PM -0800, Mark Moseley wrote:
> We don't do a lot (or practically any) AXFRs, so I hadn't noticed this
> before now.
Hi Mark,
You probably have something in the database that upsets us (which should not
happen of course).
Can you run pdnssec check-zone on example2
We don't do a lot (or practically any) AXFRs, so I hadn't noticed this
before now.
For every domain of ours that I've tried, doing an AXFR (to a pdns running
on localhost -- mysqld running on localhost too; running the powerdns
ubuntu precise package for 3.4.2, not running dnssec), it appears to c
I've recently enabled DNSSEC with the MySQL backend. I'm using the MySQL
Backend for everything (including storage of zones/records). If I remove a zone
completely from the MySQL domains/records tables (all data deleted), do I need
to also A) Run pdnssec , B) delete anything else from MySQL, or
Nevermind, my bad. It's not enough for the user to have read permissions on the
/etc/pdns directory and /etc/pdns/pdns.conf file. The user also must have
execute permissions on the /etc/pdns directory. When I added that, it worked.
Thanks!
Nick
On Feb 27, 2015, at 12:19 PM, Nick Williams wrote
I have a (secured) PHP browser GUI (that I can only access while connected to
the VPN) that I use to manage my domains. I'm enabling DNSSEC, so I decided to
update my PHP GUI to run the necessary pdnssec commands (secure-zone,
set-nsec3, rectify-zone) when applicable. However, when I use PHP's e
> Is there not a way to set NSEC3 parameters (pdnssec set-nsec3) for all zones?
No, because most people chose differing NSEC3PARAMs for their zones.
pdnssec list-all-zones | grep -v '^All zonecount:' | while read z
do
pdnssec set-nsec3 ...
done
Not terribl
> but why exactly is zone templates something which you guys politely
> call useless?
OK, maybe I ought to apologize for my tone, so I apologize.
If you're going to use an API, it seems natural (to me at least) that
you'll be creating an application of sorts to leverage that API to
create, popul
Is there not a way to set NSEC3 parameters (pdnssec set-nsec3) for all zones?
There's secure-all-zones and rectify-all-zones, but nothing about set-nsec3 for
all zones. That could certainly get cumbersome on very large installations. :-/
Thanks,
Nick
On Fri, Feb 27, 2015 at 06:44:47PM +0200, Keresztes Péter-Zoltán wrote:
> Think at something else.
>
> templates are different from company to company however api is a standard
> thing therefore you design your template to match the API requirements and
> not vice versa.
>
>
> > On Feb 27, 201
Think at something else.
templates are different from company to company however api is a standard thing
therefore you design your template to match the API requirements and not vice
versa.
> On Feb 27, 2015, at 6:10 PM, Melvin Mughal wrote:
>
> in
__
I'm not a DNS expert, but why exactly is zone templates something which you
guys politely call useless? In our perspective, it seems efficient and
clean when:
1. You need to import a lot of zones (in our case more than 50k). Just
adding a template attribute to the API call makes it a bit more easy
> template are not standard for everyone. so this useless.
Utterly useless, yes.
-JP
___
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
http://mailman.powerdns.com/mailman/listinfo/pdns-users
On Fri, 27 Feb 2015 13:12:02 +0100
Melvin Mughal wrote:
> Probably it's a Poweradmin thing. I thought it was a
> PowerDNS feature. In Poweradmin, you can create zone
> templates and when creating a zone, you can select a
> template you wish to use for the records to be
> automatically created. Ve
Probably it's a Poweradmin thing. I thought it was a PowerDNS feature. In
Poweradmin, you can create zone templates and when creating a zone, you can
select a template you wish to use for the records to be automatically
created. Very handy feature.
2015-02-27 10:57 GMT+01:00 Christian Hofstaedtle
PowerDNS doesn’t know anything about templates.
What are you talking about?
--
Christian Hofstaedtler / Deduktiva GmbH (FN 418592 b, HG Wien)
www.deduktiva.com / +43 1 353 1707
> On 27 Feb 2015, at 11:09, Melvin Mughal wrote:
>
> That's a shame. It would be great if you could give the templa
That's a shame. It would be great if you could give the template name with
the API call and it would automatically create records from that template.
That would be a feature request ;)
2015-02-26 21:06 GMT+01:00 Christian Hofstaedtler <
christian.hofstaedt...@deduktiva.com>:
>
> > On 26 Feb 2015,
Wow this'll be so handy,
Thanks for that
On 10/02/15 20:30, James Cornman wrote:
> Hello:
>
> For authoritative:
>
> # version-stringPowerDNS version in packets - full, anonymous,
> powerdns or custom
> #
> version-string=anonymous
>
>
> For recursor:
>
> I dont know if it has the sa
We are testing with DNSSEC on our PowerDNS setup, everything seems to be
working except the slave server isn't using the DNSKEY set from the master,
am I missing the concept and should I register both keys at the parrent
zone, or is the slave capable of using the key set from the master?
see here
19 matches
Mail list logo
