[Pdns-users] Serial lagging in authoritative 4.2.2 using native MySQL sync from 4.1.13

[Cristian Seres]

Hi,

one of three authoritative name servers (ns3) which uses authoritative 
version 4.2.2 gives older serial number than the other two which use 
version 4.1.13.

MySQL sync is working properly and as far as I can see, databases are 
identical. Also executing pdns-util increase-serial on the main server 
did not correct the situation, the version 4.2.2 is still one step 
behind in serial.

All have default-soa-edit=INCEPTION-INCREMENT. The type if MASTER. I 
also tried to comment out default-soa-edit on ns3, but after that, the 
serial was two steps behind.

Is there a setting that can be used to fix this mismatch or is the only 
way to upgrade all to 4.2.2 level?

I have created a test zone on the servers. Here is some more information:

# dig +short -t soa testxyz @ns1.contrasec.fi
ns1.contrasec.fi. domain.contrasec.fi. 2020051405 10800 3600 604800 3600
# dig +short -t soa testxyz @ns3.contrasec.fi
ns1.contrasec.fi. domain.contrasec.fi. 2020051404 10800 3600 604800 3600


ns1:

# rpm -q pdns
pdns-4.1.13-1pdns.el7.x86_64

MariaDB [powerdns]> select * from domainmetadata where domain_id=265;
+-----+-----------+--------------+---------------------+
| id  | domain_id | kind         | content             |
+-----+-----------+--------------+---------------------+
| 835 |       265 | SOA-EDIT-API | INCEPTION-INCREMENT |
+-----+-----------+--------------+---------------------+
1 row in set (0.00 sec)

MariaDB [powerdns]> select * from records where domain_id=265;
+--------+-----------+---------+------+------------------------------------------------------------------------+-------+------+-------------+----------+-----------+------+
| id     | domain_id | name    | type | content 
                                       | ttl   | prio | change_date | 
disabled | ordername | auth |
+--------+-----------+---------+------+------------------------------------------------------------------------+-------+------+-------------+----------+-----------+------+
| 439369 |       265 | testxyz | CAA  | 0 issue "letsencrypt.org" 
                                       |  3600 |    0 |        NULL | 
     0 |           |    1 |
| 439370 |       265 | testxyz | CAA  | 0 issuewild "letsencrypt.org" 
                                       |  3600 |    0 |        NULL | 
     0 |           |    1 |
| 439371 |       265 | testxyz | NS   | ns1.contrasec.fi 
                                       | 86400 |    0 |        NULL | 
     0 |           |    1 |
| 439372 |       265 | testxyz | NS   | ns2.contrasec.fi 
                                       | 86400 |    0 |        NULL | 
     0 |           |    1 |
| 439373 |       265 | testxyz | NS   | ns3.contrasec.fi 
                                       | 86400 |    0 |        NULL | 
     0 |           |    1 |
| 439374 |       265 | testxyz | TXT  | "v=spf1 -all" 
                                       |  3600 |    0 |        NULL | 
     0 |           |    1 |
| 439375 |       265 | testxyz | SOA  | ns1.contrasec.fi 
domain.contrasec.fi 2020051403 10800 3600 604800 3600 | 86400 |    0 | 
      NULL |        0 |           |    1 |
+--------+-----------+---------+------+------------------------------------------------------------------------+-------+------+-------------+----------+-----------+------+
7 rows in set (0.00 sec)



ns3:

# rpm -q pdns
pdns-4.2.2-1pdns.el8.x86_64

MariaDB [powerdns]>  select * from domainmetadata where domain_id=265;
+-----+-----------+--------------+---------------------+
| id  | domain_id | kind         | content             |
+-----+-----------+--------------+---------------------+
| 835 |       265 | SOA-EDIT-API | INCEPTION-INCREMENT |
+-----+-----------+--------------+---------------------+
1 row in set (0.001 sec)

MariaDB [powerdns]>  select * from records where domain_id=265;
+--------+-----------+---------+------+------------------------------------------------------------------------+-------+------+-------------+----------+-----------+------+
| id     | domain_id | name    | type | content 
                                       | ttl   | prio | change_date | 
disabled | ordername | auth |
+--------+-----------+---------+------+------------------------------------------------------------------------+-------+------+-------------+----------+-----------+------+
| 439369 |       265 | testxyz | CAA  | 0 issue "letsencrypt.org" 
                                       |  3600 |    0 |        NULL | 
     0 |           |    1 |
| 439370 |       265 | testxyz | CAA  | 0 issuewild "letsencrypt.org" 
                                       |  3600 |    0 |        NULL | 
     0 |           |    1 |
| 439371 |       265 | testxyz | NS   | ns1.contrasec.fi 
                                       | 86400 |    0 |        NULL | 
     0 |           |    1 |
| 439372 |       265 | testxyz | NS   | ns2.contrasec.fi 
                                       | 86400 |    0 |        NULL | 
     0 |           |    1 |
| 439373 |       265 | testxyz | NS   | ns3.contrasec.fi 
                                       | 86400 |    0 |        NULL | 
     0 |           |    1 |
| 439374 |       265 | testxyz | TXT  | "v=spf1 -all" 
                                       |  3600 |    0 |        NULL | 
     0 |           |    1 |
| 439375 |       265 | testxyz | SOA  | ns1.contrasec.fi 
domain.contrasec.fi 2020051403 10800 3600 604800 3600 | 86400 |    0 | 
      NULL |        0 |           |    1 |
+--------+-----------+---------+------+------------------------------------------------------------------------+-------+------+-------------+----------+-----------+------+
7 rows in set (0.001 sec)


With best regards,

-- 
Cristian Seres