[Pdns-users] "GSQLBackend unable to list metadata" with dnssec disabled?

[Aki Tuomi]

On Tue, Nov 04, 2014 at 01:57:43PM +0100, Oli Schacher wrote:
> Hi
> 
> I have  a strange issue with one of my auth servers. I'm using the
> gmysql backend with custom table names (powerdns has to query a
> database where the table 'domains' is used for a different purpose, so
> all pdns tables have a "pdns_" prefix)
> 
> This is the full config file:
> 
> #####
> cat /etc/pdns/pdns.conf
> launch=gmysql
> gmysql-host=<munged>
> gmysql-user=<munged>
> gmysql-password=<munged>
> gmysql-dbname=<munged>
> gmysql-basic-query=select content,ttl,prio,type,domain_id,name from pdns_records where type='%s' and name='%s' 
> gmysql-id-query=select content,ttl,prio,type,domain_id,name from pdns_records where type='%s' and name='%s' and domain_id=%d
> gmysql-any-query=select content,ttl,prio,type,domain_id,name from pdns_records where name='%s'
> gmysql-any-id-query=select content,ttl,prio,type,domain_id,name from pdns_records where name='%s' and domain_id=%d
> gmysql-list-query=select content,ttl,prio,type,domain_id,name from pdns_records where domain_id=%d
> #####
> 
> 
> On one server, this causes the following error:
> Backend reported permanent error which prevented lookup (GSQLBackend unable to list metadata: Failed to execute mysql_query, perhaps connection died? Err=1: SELECT command denied to user '<munged>'@'<munged>' for table 'domains'), aborting
> Backend error: GSQLBackend unable to list metadata: Failed to execute mysql_query, perhaps connection died? Err=1: SELECT command denied to user '<munged>'@'<munged>' for table 'domains'
> 

Domain table is consulted in some cases, not metadata. You need to fix those queries as well, and permit read access to the domains table.

Aki