[Pdns-users] Supermaster/superslave

2020-04-02 Thread Alan Batie via Pdns-users
I'm in the process of migrating to powerdns to take advantage of the supermaster/superslave feature in particular (as well as better dnssec management), with a hidden master architecture to provide additional security for administration and dnssec private keys. It seems, however, that for the

[Pdns-users] supermaster setting purpose?

2018-11-21 Thread MRob
Running version 4.1, there is no supermaster setting in the main config (doc says it added in 4.2) but I understand supermaster feature should work under 4.1, is that correct? When migrating to 4.2 what feature does ''supermaster=yes'' add for having in config file? Must I remove ''master=yes'

[Pdns-users] supermaster + TSIG AXFR: what obvious thing am I missing?

2016-05-08 Thread Marek Isalski
Firstly, thank you, Bert, for coming to UKNOF34 and presenting on dnsdist and powerdns. Really interesting and useful technology. And for that reason I've been testing out whether powerdns would be a good fit to replace our scripted BIND servers that do authoritative and DNSSEC. The idea is to

Re: [Pdns-users] Supermaster & Slaves - Supermaster has to be a listed NS?

2013-07-05 Thread ymicromed
Hi Aki, Thanks, My earlier answer (that worked for me) was originated from: https://github.com/PowerDNS/pdns/issues/546 Have a nice day Momo -- View this message in context: http://powerdns.13854.n7.nabble.com/Supermaster-Slaves-Supermaster-has-to-be-a-listed-NS-tp9276p10152.html Sent from

Re: [Pdns-users] Supermaster & Slaves - Supermaster has to be a listed NS?

2013-07-05 Thread Aki Tuomi
On Fri, Jul 05, 2013 at 03:25:51AM -0700, ymicromed wrote: > Hi Aki, > > Thanks for your reply. > > I meant by my post that the 3 slaves ns1, ns2, ns3 didn't accept the > notification from the SUPERMASTER ns4. > > I've had the same situation, and after rectifying the zone on the master > ns4, it

Re: [Pdns-users] Supermaster & Slaves - Supermaster has to be a listed NS?

2013-07-05 Thread ymicromed
Hi Aki, Thanks for your reply. I meant by my post that the 3 slaves ns1, ns2, ns3 didn't accept the notification from the SUPERMASTER ns4. I've had the same situation, and after rectifying the zone on the master ns4, it worked for me, and slaves started axfr transfer from the supermaster. I th

Re: [Pdns-users] Supermaster & Slaves - Supermaster has to be a listed NS?

2013-07-05 Thread Aki Tuomi
On Fri, Jul 05, 2013 at 01:58:40AM -0700, ymicromed wrote: > Hi, > > To fix this problem, you don't have to add your ns4 to the NS records. > > *use the pdnssec utility:* > > pdnssec rectify-zone test.com > This will not cause domain transfers, sorry :( If you want to have your domain notifie

Re: [Pdns-users] Supermaster & Slaves - Supermaster has to be a listed NS?

2013-07-05 Thread ymicromed
Hi, To fix this problem, you don't have to add your ns4 to the NS records. *use the pdnssec utility:* pdnssec rectify-zone test.com And the ns1, ns2, ns3 will initiate the transfer from ns4 :) *Here an example:* % Jul 05 10:34:13 Received NOTIFY for test1.com from xxx.xxx.xxx.xxx for which we

Re: [Pdns-users] Supermaster error

2013-05-09 Thread Aki Tuomi
On Thu, May 09, 2013 at 03:54:36PM -0700, Gregg wrote: > Hello, > > I've been trying to setup a PDNS server for a while now. I have a local > setup that seems to work perfectly. Two PDNS server with MySQL replication. > > Now I have been trying to get PDNS to act as superslave for a few other >

[Pdns-users] Supermaster error

2013-05-09 Thread Gregg
Hello, I've been trying to setup a PDNS server for a while now. I have a local setup that seems to work perfectly. Two PDNS server with MySQL replication. Now I have been trying to get PDNS to act as superslave for a few other servers. I have configured everything properly, added the supermast

Re: [Pdns-users] supermaster sends notify to itself on zone update?

2013-01-21 Thread Peter van Dijk
Hello Alex, On Jan 22, 2013, at 3:35 , ot...@ahhyes.net wrote: > Firstly, everything appears to be working ok, updates to the slave work fine. > I am just puzzled by this bizarre way powerdns does things, the first 2 lines > of "Queued notification" events are queuing notifications to the maste

[Pdns-users] supermaster sends notify to itself on zone update?

2013-01-21 Thread other
Hi Guys, I am seeing some odd entries on my master server logs (same behavior witnessed in 3.1 and 3.2-rc4). Log Snippet: Jan 22 13:01:32 ns pdns[53002]: 1 domain for which we are master needs notifications Jan 22 13:01:32 ns pdns[53002]: Queued notification of domain 'example.net' to 2001:

Re: [Pdns-users] Supermaster / slaves

2012-11-26 Thread Ton van Rosmalen
Hi Ed, Op 26-11-12 17:08, Ed schreef: Hi, I've looked through the documentation and searched the archives and haven't found a concrete answer to this issue: We have a hidden master that updates slaves that are the internet facing DNS resolvers, they are not recursive. We want to use autom

[Pdns-users] Supermaster / slaves

2012-11-26 Thread Ed
Hi, I've looked through the documentation and searched the archives and haven't found a concrete answer to this issue: We have a hidden master that updates slaves that are the internet facing DNS resolvers, they are not recursive. We want to use automatic zone provisioning via the supermaster

[Pdns-users] Supermaster NOTIFY Restarts PowerDNS 3.1 (gmysql backend)

2012-06-02 Thread nrnelson
I am not certain that this is normal behavior for PowerDNS. Everything seems to work but it seems like something is wrong. I have a Windows DNS server that I have configured to automatically notify this particular PowerDNS server whenever a zone changes. These are existing domains on the Window

Re: [Pdns-users] Supermaster and superslave automatic provisioning

2012-05-24 Thread a b
> One reason is that this supports setups of the following type: > - ns01 is a powerdns machine in slave mode, slaving domains from other > machines. > - ns01 stores all slaved zones in a database (MySQL, Oracle, etc.) which is > replicated to one or more database slaves > - ns02/ns03 use these

Re: [Pdns-users] Supermaster and superslave automatic provisioning

2012-05-24 Thread Peter van Dijk
Hello, On May 24, 2012, at 17:58 , a b wrote: > Can anyone tell me why this needs to be explicitly set in the > pdns.conf file, when we have a relational database as the backend > storage and the database contains all the information required > for pdns_server to know whether he is to be a

Re: [Pdns-users] Supermaster and superslave automatic provisioning

2012-05-24 Thread Jan-Piet Mens
[...] > I mean the "zones" table; we use the "oracle" backend instead  of Pardon me: I wasn't paying attention. -JP ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: [Pdns-users] Supermaster and superslave automatic provisioning

2012-05-24 Thread a b
> > Regarding superslave provisioning, does the pdns.conf on the mas- > > ter need to have "master=yes" and does the pdns.conf on the slave > > need to have "slave=yes" > > Correct: the master must be a master, and the slave a slave. :) Zones > are transferred via AXFR. Can anyone tell me why thi

Re: [Pdns-users] Supermaster and superslave automatic provisioning

2012-05-24 Thread Jan-Piet Mens
> Regarding superslave provisioning, does the pdns.conf on the mas- > ter need to have "master=yes" and does the pdns.conf on the slave > need to have "slave=yes" Correct: the master must be a master, and the slave a slave. :) Zones are transferred via AXFR. > The documentation mentions all sorts

[Pdns-users] Supermaster and superslave automatic provisioning

2012-05-24 Thread a b
Regarding superslave provisioning, does the pdns.conf on the mas- ter need to have "master=yes" and does the pdns.conf on the slave need to have "slave=yes",  or  can  all  of  that  be  configured directly by doing INSERT statements in the database? The documentation mentions all sorts of scenar

Re: [Pdns-users] supermaster and stale domains

2011-09-29 Thread Jan-Piet Mens
> I'm remove record from master - can it possible to remove it automatic from > slave ? A zone transfer will be initiated by the slave when it detects that the SOA serial number on the master has increased. At this point, the zone transfer (AXFR) will "delete" the records on the slave. Your PDNS m

[Pdns-users] supermaster and stale domains

2011-09-28 Thread Vasiliy Tolstov
Hello. I'm use pdns on two servers with supermaster mode. When the new record appeared on master it transfers to slave. But how about deleted records? I'm remove record from master - can it possible to remove it automatic from slave ? -- Vasiliy Tolstov, Clodo.ru e-mail: v.tols...@selfip.ru jabbe

[Pdns-users] Supermaster without NS records

2009-05-13 Thread Lee Huffman
Hello users, We are operating a shared hosting server and attempting to setup two separate authoritative name servers. We chose PowerDNS for this because of the supermaster functionality. The plan was to have our shared hosting server (running BIND) set as a supermaster on ns1 (PowerDNS), so

Re: [Pdns-users] Supermaster XFER problem

2008-05-21 Thread Augie Schwer
On Wed, May 21, 2008 at 7:22 AM, Kieran Barnes <[EMAIL PROTECTED]> wrote: > Dig reports "Transfer failed". > I'm guessing there must be some config issue on DNS1. > How do I turn debugging on? http://docs.powerdns.com/all-settings.html loglevel and query-logging might help. -- Augie Schwer - [

Re: [Pdns-users] Supermaster XFER problem

2008-05-21 Thread Kieran Barnes
Dig reports "Transfer failed". I'm guessing there must be some config issue on DNS1. How do I turn debugging on? Augie Schwer wrote: On Wed, May 21, 2008 at 6:40 AM, Kieran Barnes <[EMAIL PROTECTED]> wrote: But I am getting the following errors May 21 14:39:23 adder pdns[28233]: 1 slave domai

Re: [Pdns-users] Supermaster XFER problem

2008-05-21 Thread Augie Schwer
On Wed, May 21, 2008 at 6:40 AM, Kieran Barnes <[EMAIL PROTECTED]> wrote: > But I am getting the following errors > May 21 14:39:23 adder pdns[28233]: 1 slave domain needs checking > May 21 14:39:23 adder pdns[28233]: No serial for '' found - zone > is missing? > May 21 14:39:23 adder pdns[28233]:

[Pdns-users] Supermaster XFER problem

2008-05-21 Thread Kieran Barnes
I've had two DNS servers set up perfectly for a while now. DNS1 being a supermaster and DNS2 receiving all it's updates from DNS2, quite straight forward. I've attempted to setup DNS3 in the same manner as DNS2. DNS3 is running all the same versions of pdns and mysql (I'm using the mysql backe

Re: [Pdns-users] Supermaster & Slaves - Supermaster has to be a listed NS?

2008-03-13 Thread Ton van Rosmalen
Mathew Hennessy schreef: Nicholas.Orr wrote: Hi, I managed to get supermaster working again. One question though. Does the server that is supermaster have to be listed in a NS record for the zone being delegated to the Slave? I was hoping I could setup ns1 - primary - slave n

Re: [Pdns-users] Supermaster & Slaves - Supermaster has to be a listed NS?

2008-03-13 Thread Mathew Hennessy
Nicholas.Orr wrote: > > Hi, > > I managed to get supermaster working again. One question though. > > Does the server that is supermaster have to be listed in a NS record for > the > zone being delegated to the Slave? > > I was hoping I could setup > ns1 - primary - slave > ns2 - secondary - s

Re: [Pdns-users] Supermaster & Slaves - Supermaster has to be a listed NS?

2008-03-13 Thread Nicholas Orr
On Thu, Mar 13, 2008 at 7:24 PM, Nicholas Orr <[EMAIL PROTECTED]> wrote: > It's just that when I left out ns4 from the ns records for that zone ns2 & > ns3 complained about not being able to find a backend for this zone from > supermaster ns4. As soon as I added ns4 as a ns record of the zone and

Re: [Pdns-users] Supermaster & Slaves - Supermaster has to be a listed NS?

2008-03-13 Thread Ton van Rosmalen
Sorry about that, didn't use reply to all. Here's a copy of my settings in table supermasters on the slaves. +---++--+ | ip    | nameserver | account  | +---++--+ | | ns1.yourdomain.com | internal

Re: [Pdns-users] Supermaster & Slaves - Supermaster has to be a listed NS?

2008-03-13 Thread Nicholas Orr
How come you didn't use the list address. On Thu, Mar 13, 2008 at 7:24 PM, Nicholas Orr <[EMAIL PROTECTED]> wrote: > Ok thanks Ton, > > I'll have another go. > It's just that when I left out ns4 from the ns records for that zone ns2 & > ns3 complained about not being able to find a backend fo

[Pdns-users] Supermaster & Slaves - Supermaster has to be a listed NS?

2008-03-12 Thread Nicholas Orr
Hi, I managed to get supermaster working again. One question though. Does the server that is supermaster have to be listed in a NS record for the zone being delegated to the Slave? I was hoping I could setup ns1 - primary - slave ns2 - secondary - slave ns3 - extra -slave ns4 - supermaster With

[Pdns-users] Supermaster with BIND (Was: Stupid subject (Was: Please Help me..Bert Hubert help me!!

2007-06-06 Thread Stephane Bortzmeyer
On Tue, Jun 05, 2007 at 10:35:48AM +, Ale * <[EMAIL PROTECTED]> wrote a message of 59 lines which said: > I’d like to add new zone (records) or modify an existent zone > (records) and i'd want that this changes are sended to master ... > Somebody told me that is it impossible because su

Re: [Pdns-users] SUPERMASTER

2007-04-16 Thread Mark Watts
> Hello, > If i have a dns primary server (160.80.1.8) and a secondary dns server > (160.80.2.4) both use bind9. I'd want to have a third dns server that use > powerdns (160.80.3.5) only to manage the dns servers that use bind > (160.80.1.8 , 160.80.2.4) which address i have to insert in the tab

[Pdns-users] SUPERMASTER

2007-04-13 Thread Ale *****
Hello, If i have a dns primary server (160.80.1.8) and a secondary dns server (160.80.2.4) both use bind9. I'd want to have a third dns server that use powerdns (160.80.3.5) only to manage the dns servers that use bind (160.80.1.8 , 160.80.2.4) which address i have to insert in the table supe

Re: [Pdns-users] SUPERMASTER

2007-04-04 Thread Mark Watts
> Hello to all, > I'd want to know something about powerDNS. I have 2 DNS server, a > master and a slave that both use bind. I'd want to have a third dns > server that use powerDNS. This DNS server that use PowerDNS should be > like a supermaster. I'll try to explain better. Using a web interface

[Pdns-users] SUPERMASTER

2007-04-04 Thread Ale *****
Hello to all, I'd want to know something about powerDNS. I have 2 DNS server, a master and a slave that both use bind. I'd want to have a third dns server that use powerDNS. This DNS server that use PowerDNS should be like a supermaster. I'll try to explain better. Using a web interface for powerD

[Pdns-users] SuperMaster

2007-03-14 Thread Erol
Can pdns accept a notify from a supermaster and then in turn act as one? I'm setting up a nameserver which will have multiple A records (round robin glue record). Basically what I'd like to have is one machine in the nameserver cluster accept a notify from a supermaster. This pdns instance would