Re: [Pdns-users] DNSSEC : One key by client to update only this client's dynamic A record

2021-06-22 Thread Kevin P. Fleming via Pdns-users
This is not related to DNSSEC, but can still be done. At A.dyndns.xxx.com you'd have a CNAME which points to an A record at A.customers.dyndns.xxx.com, and the user's TSIG key would only allow modifying the record(s) in that subzone. So you'd have one subzone per customer, and the TSIG keys would

[Pdns-users] DNSSEC : One key by client to update only this client's dynamic A record

2021-06-22 Thread David J. via Pdns-users
Hello everyone, I would like to configure my own dyndns service. I managed to configure and make it work. I try now to secure this service. I followed with success this doc : https://doc.powerdns.com/authoritative/dnsupdate.html). However, as far as I understand there is only one key for the

Re: [Pdns-users] PDNS Authoritative and CNAME pointing to external Domain responds with NXDOMAIN

2021-06-22 Thread Thomas via Pdns-users
Am 22.06.2021 um 17:27 schrieb Brian Candler: On 22/06/2021 16:16, Thomas via Pdns-users wrote: Thanks for the clarification, but this scares me. How can I have configured the server in a way it thinks it is authoritative for the entire Internet? It should be authoritative for zur-sonne.it and

Re: [Pdns-users] PDNS Authoritative and CNAME pointing to external Domain responds with NXDOMAIN

2021-06-22 Thread Brian Candler via Pdns-users
On 22/06/2021 16:16, Thomas via Pdns-users wrote: Thanks for the clarification, but this scares me. How can I have configured the server in a way it thinks it is authoritative for the entire Internet? It should be authoritative for zur-sonne.it and the other 2500 domains we have, sihosting.clou

Re: [Pdns-users] PDNS Authoritative and CNAME pointing to external Domain responds with NXDOMAIN

2021-06-22 Thread Thomas via Pdns-users
Thanks for the clarification, but this scares me. How can I have configured the server in a way it thinks it is authoritative for the entire Internet? It should be authoritative for zur-sonne.it and the other 2500 domains we have, sihosting.cloud is not part of the domains we host Am 22.06

Re: [Pdns-users] PDNS Authoritative and CNAME pointing to external Domain responds with NXDOMAIN

2021-06-22 Thread Brian Candler via Pdns-users
On 22/06/2021 15:54, Thomas wrote: Doing a "dig www.zur-sonne.it +nostats +nocomments +nocmd @localhost" I (think) get correct result: ; <<>> DiG 9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.5 <<>> www.zur-sonne.it +nostats +nocomments +nocmd @localhost ;; global options: +cmd ;www.zur-sonne.it. 

Re: [Pdns-users] PDNS Authoritative and CNAME pointing to external Domain responds with NXDOMAIN

2021-06-22 Thread Thomas via Pdns-users
Am 22.06.2021 um 16:16 schrieb Brian Candler: On 22/06/2021 14:55, Thomas via Pdns-users wrote: I have upgraded pdns authoritative server from version 4.3 to version 4.4.1 on CentOS 7, MySQL is the backend. If I query a CNAME record on both servers I get the following error (do not remember if

Re: [Pdns-users] PDNS Authoritative and CNAME pointing to external Domain responds with NXDOMAIN

2021-06-22 Thread Brian Candler via Pdns-users
On 22/06/2021 14:55, Thomas via Pdns-users wrote: I have upgraded pdns authoritative server from version 4.3 to version 4.4.1 on CentOS 7, MySQL is the backend. If I query a CNAME record on both servers I get the following error (do not remember if it worked before the upgrade): [root@pdns1 lo

[Pdns-users] PDNS Authoritative and CNAME pointing to external Domain responds with NXDOMAIN

2021-06-22 Thread Thomas via Pdns-users
Hello, I have upgraded pdns authoritative server from version 4.3 to version 4.4.1 on CentOS 7, MySQL is the backend. If I query a CNAME record on both servers I get the following error (do not remember if it worked before the upgrade): [root@pdns1 log]# nslookup www.example.it localhost Serv

Re: [Pdns-users] Zone transfert rejected in Powerdns Letsencrypt challenge

2021-06-22 Thread Kevin P. Fleming via Pdns-users
On Tue, Jun 22, 2021 at 7:46 AM Brian Candler via Pdns-users wrote: > It doesn't actually matter what nameserver you use for acme-ns.example.net, > because the data stored within it is completely transitory. Even something > with a RAM backend would be fine. I happen to use bind9 because it w

Re: [Pdns-users] Zone transfert rejected in Powerdns Letsencrypt challenge

2021-06-22 Thread Brian Candler via Pdns-users
On 22/06/2021 12:33, Jan-Piet Mens via Pdns-users wrote: For Letsencrypt protocol to generate certificate I have to enable zone transfer in my powerdns. I think you mean "DNS Updates" for Let's Encrypt dns-01, but I don't believe these are possible in PowerDNS with the LDAP backend. Possibly

Re: [Pdns-users] Zone transfert rejected in Powerdns Letsencrypt challenge

2021-06-22 Thread Jan-Piet Mens via Pdns-users
For Letsencrypt protocol to generate certificate I have to enable zone transfer in my powerdns. I think you mean "DNS Updates" for Let's Encrypt dns-01, but I don't believe these are possible in PowerDNS with the LDAP backend. -JP ___ Pdns-use