[Pdns-users] "GSQLBackend unable to list metadata" with dnssec disabled?

[Aki Tuomi]

On Tue, Nov 04, 2014 at 03:53:47PM +0100, Oli Schacher wrote:
> On Tue, 4 Nov 2014 16:02:43 +0200
> Aki Tuomi <cmouse at youzen.ext.b2.fi> wrote:
> 
> > On Tue, Nov 04, 2014 at 02:32:34PM +0100, Oli Schacher wrote:
> > > On Tue, 4 Nov 2014 15:10:28 +0200
> > > Aki Tuomi <cmouse at youzen.ext.b2.fi> wrote:
> > > > 
> > > > Domain table is consulted in some cases, not metadata. You need to
> > > > fix those queries as well, and permit read access to the domains
> > > > table.
> > > > 
> > > > Aki
> > > 
> > > Which additional queries do I have to fix? The documentation on
> > > http://doc.powerdns.com/html/generic-mypgsql-backends.html states
> > > that only the basic queries are used if I don't enable features like
> > > dnssec and master/slave. 
> > > 
> > > Of course I could just override all queries listed there, but I'd
> > > really like to know why this configuration works on two servers but
> > > not on the third. Could you give an example situation which would
> > > cause the domains table to be queried and cause this error?
> > > 
> > > Thanks
> > > Oli
> > > 
> > 
> > Look at the 
> > 
> > # gmysql-get-all-domains-query  Retrieve all domains
> > # gmysql-get-all-domains-query=select domains.id, domains.name,
> > records.content, domains.type, domains.master,
> > domains.notified_serial, domains.last_check from domains LEFT JOIN
> > records ON records.domain_id=domains.id AND records.type='SOA' AND
> > records.name=domains.name WHERE records.disabled=0 OR %d #
> > gmysql-info-zone-query=select
> > id,name,master,last_check,notified_serial,type from domains where
> > name='%s'
> > 
> > i'm pretty sure it's one of these.
> 
> Changing these  didn't help, same error. I enabled the query log on
> the mysql server which shows powerdns running the following
> query: 
> 
> select content from domains, domainmetadata where
> domainmetadata.domain_id=domains.id and name='<munged>' and
> domainmetadata.kind='SOA-EDIT'
> 
> This corresponds to the "get-domain-metadata-query" setting. The doc
> on metadata however states: "Domain metadata is only available for
> DNSSEC capable backends! Make sure to enable the proper '-dnssec'
> setting to benefit, and to have performed the DNSSEC schema update."
> 
> I did not enable gmysql-dnssec - so why is pdns trying to run this
> query?
> 

Apparently this has been changed in latest version, and documentation
has not been updated to reflect this change. Sorry about this. 

Aki

> 
> -- 
> message transmitted on 100% recycled electrons
> 
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
>