Hi, I'm having trouble locating the problem why for one of our domains the RRSIG record is different on the master and on the slaves (on the 2 slaves they are identical). All DNS servers are PowerDNS servers running version 3.3 with MySQL backend. Transfers are done using AXFR.
Using dig +dnssec SOA: MASTER: concepthouse.nl. 3600 IN RRSIG SOA 8 2 3600 20131003000000 20130912000000 37080 concepthouse.nl. nbB9I23pT6eTpPrJi12J6lW6R3CvYhjD0tZgR0k5K3ZARsFc+rBULYwF 9yIYyMhQWHMcWFhBI8khi8U96DT8cMu884Mp/3n5N8Ey3bm5BLVDipEJ NErDp/1jE8JLdGOLvqIP5+3aBGCD8EhJ108OTykk0R/rEmXBCXNBP5O0 sEA= concepthouse.nl. 3600 IN SOA ns1.bhosted.nl. hostmaster.bhosted.nl. 2013092403 10800 3600 302400 3600 SLAVE 1: concepthouse.nl. 3600 IN RRSIG SOA 8 2 3600 20131003000000 20130912000000 14754 concepthouse.nl. hnVskWJ8HvqVj77fevulu4OprL6Yq9A7JD405gspWvlhcf4dsm/Jgmwv fZyoHFA8Z04LmMNyfUNfXXRGd0ZufGONKU/5qSd2mTeAmapGE1ompyyP u5JAcaF1EYumjkwBML75mD+bBfAhJm8Z6fD0fjcvIXoMemzb3qVAMysZ iMU= concepthouse.nl. 3600 IN SOA ns1.bhosted.nl. hostmaster.bhosted.nl. 2013092402 10800 3600 302400 3600 SLAVE 2: concepthouse.nl. 3600 IN SOA ns1.bhosted.nl. hostmaster.bhosted.nl. 2013092402 10800 3600 302400 3600 concepthouse.nl. 3600 IN RRSIG SOA 8 2 3600 20131003000000 20130912000000 14754 concepthouse.nl. hnVskWJ8HvqVj77fevulu4OprL6Yq9A7JD405gspWvlhcf4dsm/Jgmwv fZyoHFA8Z04LmMNyfUNfXXRGd0ZufGONKU/5qSd2mTeAmapGE1ompyyP u5JAcaF1EYumjkwBML75mD+bBfAhJm8Z6fD0fjcvIXoMemzb3qVAMysZ iMU= As you can see the serials are the same, but the DNSkey number is different. How do I fix this? Disable DNSsec for this domain (and removing all DNSkeys), and after that enable it again? Or is there another way? Kind regards, Marc van de Geijn -- View this message in context: http://powerdns.13854.n7.nabble.com/Different-RRSIG-s-on-master-and-slaves-tp10349.html Sent from the PowerDNS mailing list archive at Nabble.com. _______________________________________________ Pdns-users mailing list [email protected] http://mailman.powerdns.com/mailman/listinfo/pdns-users
