<div dir="ltr">Hi,<div><br></div><div>just converted to dnssec, updated pdns.conf etc.</div><div><br></div><div style>ns1 is a supermaster, ns2 & ns3 are slaves.</div><div style>Replication works fine.</div><div style>
<br></div><div style>But when I create a domain and insert some records on ns1 and then run:</div><div style>[fb@ns1 ~]$ pdnssec check-zone <a href="http://selfinsert.com">selfinsert.com</a><br></div><div style>Following record is auth=0, run pdnssec rectify-zone?: <a href="http://selfinsert.com">selfinsert.com</a> IN MX 25 <a href="http://mail.test.com">mail.test.com</a><br>
</div><div style>[fb@ns1 ~]$ pdnssec rectify-zone <a href="http://selfinsert.com">selfinsert.com</a></div><div>Adding NSEC ordering information</div><div><div>[fb@ns1 ~]$ pdnssec check-zone <a href="http://selfinsert.com">selfinsert.com</a></div>
<div>Checked 8 records of '<a href="http://selfinsert.com">selfinsert.com</a>', 0 errors</div><div>[fb@ns1 ~]$ pdnssec secure-zone <a href="http://selfinsert.com">selfinsert.com</a></div><div>Zone <a href="http://selfinsert.com">selfinsert.com</a> secured</div>
</div><div><br></div><div style>Mysql output on ns1:</div><div style><div>mysql> select * from records where domain_id=29;</div><div>+-----+-----------+--------------------------+------+------------------------------------------------------------------------+-------+------+-------------+-----------+------+</div>
<div>| id | domain_id | name | type | content | ttl | prio | change_date | ordername | auth |</div><div>+-----+-----------+--------------------------+------+------------------------------------------------------------------------+-------+------+-------------+-----------+------+</div>
<div>| 209 | 29 | <a href="http://selfinsert.com">selfinsert.com</a> | SOA | <a href="http://ns1.yeetta.net">ns1.yeetta.net</a> <a href="http://hostmaster.yeetta.net">hostmaster.yeetta.net</a> 2013013002 86400 86400 604800 300 | 86400 | NULL | NULL | | 1 |</div>
<div>| 210 | 29 | <a href="http://selfinsert.com">selfinsert.com</a> | NS | <a href="http://ns1.yeetta.net">ns1.yeetta.net</a> | 600 | NULL | NULL | | 1 |</div>
<div>| 211 | 29 | <a href="http://selfinsert.com">selfinsert.com</a> | NS | <a href="http://ns2.yeetta.net">ns2.yeetta.net</a> | 600 | NULL | NULL | | 1 |</div>
<div>| 212 | 29 | <a href="http://selfinsert.com">selfinsert.com</a> | NS | <a href="http://ns3.yeetta.net">ns3.yeetta.net</a> | 600 | NULL | NULL | | 1 |</div>
<div>| 213 | 29 | <a href="http://www.selfinsert.com">www.selfinsert.com</a> | A | 1.2.3.4 | 120 | NULL | NULL | www | 1 |</div>
<div>| 214 | 29 | <a href="http://mail.selfinsert.com">mail.selfinsert.com</a> | A | 2.3.4.5 | 120 | NULL | NULL | mail | 1 |</div>
<div>| 215 | 29 | <a href="http://localhost.selfinsert.com">localhost.selfinsert.com</a> | A | 127.0.0.1 | 120 | NULL | NULL | localhost | 1 |</div>
<div>| 216 | 29 | <a href="http://selfinsert.com">selfinsert.com</a> | MX | <a href="http://mail.test.com">mail.test.com</a> | 120 | 25 | NULL | | 1 |</div>
<div>+-----+-----------+--------------------------+------+------------------------------------------------------------------------+-------+------+-------------+-----------+------+</div><div>8 rows in set (0.00 sec)</div><div>
<br></div><div><br></div><div style>but on a slaves (after updating the serial):</div><div style><div>mysql> select * from records where domain_id=19;</div><div>+-----+-----------+--------------------------+--------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------+------+-------------+-----------+------+</div>
<div>| id | domain_id | name | type | content | ttl | prio | change_date | ordername | auth |</div>
<div>+-----+-----------+--------------------------+--------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------+------+-------------+-----------+------+</div>
<div>| 730 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | SOA | <a href="http://ns1.yeetta.net">ns1.yeetta.net</a>. <a href="http://hostmaster.yeetta.net">hostmaster.yeetta.net</a>. 2013013002 86400 86400 604800 300 | 86400 | 0 | NULL | | 1 |</div>
<div>| 731 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | RRSIG | SOA 8 2 86400 20130207000000 20130124000000 38950 <a href="http://selfinsert.com">selfinsert.com</a>. Sw2simr+zbZLaRhhlSGi5uT0FNr0hDFQxio6JhocuGnTpAlhFZaw/lFwWAhU0rt84zM4fSU3YkGARbMbLPcbC9Pld82xvjmAHUsEEZjQnpaeNs63xoJAMsgOOrKt47ika0Cdb8kuBMmYmvx/DTbTAnN3FcIp3/17fs4hFNs9sdw= | 86400 | 0 | NULL | | 1 |</div>
<div>| 732 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | RRSIG | NSEC 8 2 86400 20130207000000 20130124000000 38950 <a href="http://selfinsert.com">selfinsert.com</a>. Jcdgyvs4/uiDzhqG/4c1bcYAbY2+OS+7Y4ARXRrb3gb0uBeBQ3TexEze14glLyUIEGZLtba/TXum08oqw34vtO1yqoyO3hC282iqJ0ZYMmimDuAdrTANcQUgntvlEDenI8RXyrSWIPqy9D2OYAwEzF9FMHEx//67Wz/BxA8nDBg= | 86400 | 0 | NULL | | 1 |</div>
<div>| 733 | 19 | <a href="http://localhost.selfinsert.com">localhost.selfinsert.com</a> | A | 127.0.0.1 | 120 | 0 | NULL | localhost | 1 |</div>
<div>| 734 | 19 | <a href="http://localhost.selfinsert.com">localhost.selfinsert.com</a> | RRSIG | A 8 3 120 20130207000000 20130124000000 38950 <a href="http://selfinsert.com">selfinsert.com</a>. PVim4SCcfArWV1BT1kGEukTp6QYn9p84LCaJhmOhvDDZ8Q0Zc82jZ3LqWdmmxoKGQDsbMxTxQNLXDp7DRmDxskXev6aScklvN4KwbhfEiVlCO065eVeQ/NFOKB/ZmrrMgAOvVR5pW4EgsnU2HVC9HuDDKJYdgMi548IWQLHH+w4= | 120 | 0 | NULL | localhost | 1 |</div>
<div>| 735 | 19 | <a href="http://mail.selfinsert.com">mail.selfinsert.com</a> | RRSIG | NSEC 8 3 120 20130207000000 20130124000000 38950 <a href="http://selfinsert.com">selfinsert.com</a>. eu4HWIToICLCrlOSytRgvynwvzJcsNc/9liqqQkGe2LqoDlPAyqX18XzBPK9QM+2g+a+Dqt/eqVCAR7b8fOfCyTc5d2mkDVo4/2jqniS2rSdEiIFY+GXzQw+o23wZ83xKesi9LyyyqeK2r2CS7aYfwD5ANSwjwqxJwGMFRic0e4= | 120 | 0 | NULL | mail | 1 |</div>
<div>| 736 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | NS | <a href="http://ns1.yeetta.net">ns1.yeetta.net</a> | 600 | 0 | NULL | | 1 |</div>
<div>| 737 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | NS | <a href="http://ns2.yeetta.net">ns2.yeetta.net</a> | 600 | 0 | NULL | | 1 |</div>
<div>| 738 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | NS | <a href="http://ns3.yeetta.net">ns3.yeetta.net</a> | 600 | 0 | NULL | | 1 |</div>
<div>| 739 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | RRSIG | NS 8 2 600 20130207000000 20130124000000 38950 <a href="http://selfinsert.com">selfinsert.com</a>. JllWyR8OOIPyminKQBgOuFA+vxJGiKugwzBxYAIojlqlVfkLqPe+xIQMYQ8kjYEiKiPGQhoxqdW5tr8fbBToyCWhJlIXJ1YO7QqfThdsuLuG3g7RNOjsxE+PQJ3ue/bSvh1X1Etmn4FuVE4SRm94dXHy0KtuJLYQiDR2NQ0WjZE= | 600 | 0 | NULL | | 1 |</div>
<div>| 740 | 19 | <a href="http://www.selfinsert.com">www.selfinsert.com</a> | RRSIG | NSEC 8 3 120 20130207000000 20130124000000 38950 <a href="http://selfinsert.com">selfinsert.com</a>. B3fEO7XuVTbAbaeUEAKwiBGMdmWmHuuyfwQYuEdTye0K5MF/CfFBBj7u3MVlNuo9PFzU7I9zETy854P5BZhvvhZosBlJAljJXYPPf553oiW6LuWV9Wf6BN3rMJHjG8RSHp0GgJIahHs6G4uUves4spOIEJW2mxjsv82qrsbohUA= | 120 | 0 | NULL | www | 1 |</div>
<div>| 741 | 19 | <a href="http://localhost.selfinsert.com">localhost.selfinsert.com</a> | RRSIG | NSEC 8 3 120 20130207000000 20130124000000 38950 <a href="http://selfinsert.com">selfinsert.com</a>. XxfbOZ15f8p7FyMyPhTAxk5CE7WwaY6dxWS6Qcoq86FmPVS9C8zuPRi1dMdoHRSNVyzbY1kOkMOa/xG0456Y5dN0nO3OixscFMQLnC78WtZAHHw6w92B7SxvtFIFVQrSzVPnq0hKdwmqYvQqEFBOeXAgbZVVpUcMmUbUeTYOFk0= | 120 | 0 | NULL | localhost | 1 |</div>
<div>| 742 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | DNSKEY | 257 3 8 AwEAAbMR1NCg4TKD9edP0BcjOlv3hpKqzfy3eUKG9Qt92j3mooXkb3PwY7Mh51OszfcbE3QPmWrg0TwkQpzVO6EuMBRfELKuW4oOLkq50UXQsMJUmPxZS6GX4S+2VkA/Cx5rYYRSnBM+VmDEOEMwYwGZVhJvbnNsnSsytUf5/FBnqIJ5NJ3g5qSMf/OwY6QvdzK389908l+DLYXuu5CZvjyFPBfBkE64peL0VseEK7cPSOVphCAwgRzaeiErvYH4U4fLPzMXRQrfz1OjlnokHBPLMrsNpyOxftUYIyg14guK3IHIeyWaBw7ENUEOe/WSbw8+bZO+vg8uvtuMrvdDCaJVo7k= | 300 | 0 | NULL | | 1 |</div>
<div>| 743 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | DNSKEY | 256 3 8 AwEAAcALi0XK55R0lJaVUf7Yd/xbbJd/iId7E5bpwsIe+mbje3i/ppB8SKq9ku2vWAl4FrKgCP1pIE2v3ZwFd3kyk2glAac1G+o293orGzZFxeipeYO+ueCcCgsYN4J9JkuyhEzObf2kJWBjfRq1FP6/lNFuPkYdkd1X5ZA5gbiAw06f | 300 | 0 | NULL | | 1 |</div>
<div>| 744 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | DNSKEY | 256 3 8 AwEAAfYSZaxqJTm3s3m+f6G3dr+hqZGlMmq4yUevDceckUqJQaZdqlGDvtbWUDea24s26E362rVSTENCb8OpdN6bteQ+5DmZIBWUs6bRxfXvGy1otRUDCVEVfIN3d2ipH+KUOxuHVMHzu3OR+IJUyUcnbYMwftO3S9gjzkleV7e3/cpZ | 300 | 0 | NULL | | 1 |</div>
<div>| 745 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | RRSIG | DNSKEY 8 2 300 20130207000000 20130124000000 30422 <a href="http://selfinsert.com">selfinsert.com</a>. geESBjcLv2zHzc+4SAWc3h/+HySb+WtiNvI7UsS8WGuE2O9oBneW6SUERkM2kEj20K60sX4/AJnXpB6L+pYcuO/6N+V81i5LAOvvwB9Jy2TP3cFTfB3HZ3lJRc8UeUH94YLhPrxgw3ZeKhfUx4lKQ1U4UBqwC29KDIYBYGntNGXNepmaYNatrgUmHI9Fc6/0IhqwDB09t+klDV+tp/YepQGDgg3WZQ5dqVdK1vFAy8SId3l0ZEM6SQNLjiA6DqJKyULlHFcsKUx2EI1+UBjt1rU6+chpt6H9NFxeyNnJzQtPWAL9ICO7unvaWMLvJJMo+Q9eCAkX8kI0pDhpj+Xpag== | 300 | 0 | NULL | | 1 |</div>
<div>| 746 | 19 | <a href="http://mail.selfinsert.com">mail.selfinsert.com</a> | A | 2.3.4.5 | 120 | 0 | NULL | mail | 1 |</div>
<div>| 747 | 19 | <a href="http://mail.selfinsert.com">mail.selfinsert.com</a> | RRSIG | A 8 3 120 20130207000000 20130124000000 38950 <a href="http://selfinsert.com">selfinsert.com</a>. Q+FN9FdrekMzYz1lBJwCRojwxV33wVGhotDwXcmtelk5noLJtU65zWcJASi7DYhLalSAEiviXb3CP8EPQg/E7AXAHnva22vMH6jWqtbrkHxnausgjLOIoxiMFbxFUISKG9DYQVyBH5r8BLcv29QeXQ+ibny8fGWdIkYddbMENdc= | 120 | 0 | NULL | mail | 1 |</div>
<div>| 748 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | MX | <a href="http://mail.test.com">mail.test.com</a> | 120 | 25 | NULL | | 1 |</div>
<div>| 749 | 19 | <a href="http://selfinsert.com">selfinsert.com</a> | RRSIG | MX 8 2 120 20130207000000 20130124000000 38950 <a href="http://selfinsert.com">selfinsert.com</a>. mdYWN4t3EUcPen6HmIC2deJIUThs2eCd7VT75ELwlOmWOGPEhYGmG8DZHYhdCfiwkTuV34RTHHIOZduuRBodoMIXtRUojjLqp15MDb+RpnU4Spb25z2Vys8GQRlXcSecsi1QitsrRqNignmp2mtMZsVf4ZYR8cGTUC0396zc26s= | 120 | 0 | NULL | | 1 |</div>
<div>| 750 | 19 | <a href="http://www.selfinsert.com">www.selfinsert.com</a> | A | 1.2.3.4 | 120 | 0 | NULL | www | 1 |</div>
<div>| 751 | 19 | <a href="http://www.selfinsert.com">www.selfinsert.com</a> | RRSIG | A 8 3 120 20130207000000 20130124000000 38950 <a href="http://selfinsert.com">selfinsert.com</a>. amsPExoth9ukG6zUQHZytIO6y5EpROydFw9ltynxLAChcE+XnAl9PAy12seOIlWnqaF3Wm4sWdFIe9G+Vwswojm7yh6CD27mFQuj3jvWySXP8BhxeZiqxna1tdO4gvUxGb+0bg1y1yP2WD0POJLlS8OU+SlLuvv4e6yGx6QHFAQ= | 120 | 0 | NULL | www | 1 |</div>
<div>+-----+-----------+--------------------------+--------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------+------+-------------+-----------+------+</div>
<div>22 rows in set (0.00 sec)</div><div><br></div><div><br></div><div style>Anyone any ideas why this happens????</div><div style><br></div><div style>Thanks</div><div style><br></div><div style>/florus</div></div><div style>
<br></div></div></div>