On Tue, 4 Nov 2014 16:02:43 +0200 Aki Tuomi <cmo...@youzen.ext.b2.fi> wrote:
> On Tue, Nov 04, 2014 at 02:32:34PM +0100, Oli Schacher wrote: > > On Tue, 4 Nov 2014 15:10:28 +0200 > > Aki Tuomi <cmo...@youzen.ext.b2.fi> wrote: > > > > > > Domain table is consulted in some cases, not metadata. You need to > > > fix those queries as well, and permit read access to the domains > > > table. > > > > > > Aki > > > > Which additional queries do I have to fix? The documentation on > > http://doc.powerdns.com/html/generic-mypgsql-backends.html states > > that only the basic queries are used if I don't enable features like > > dnssec and master/slave. > > > > Of course I could just override all queries listed there, but I'd > > really like to know why this configuration works on two servers but > > not on the third. Could you give an example situation which would > > cause the domains table to be queried and cause this error? > > > > Thanks > > Oli > > > > Look at the > > # gmysql-get-all-domains-query Retrieve all domains > # gmysql-get-all-domains-query=select domains.id, domains.name, > records.content, domains.type, domains.master, > domains.notified_serial, domains.last_check from domains LEFT JOIN > records ON records.domain_id=domains.id AND records.type='SOA' AND > records.name=domains.name WHERE records.disabled=0 OR %d # > gmysql-info-zone-query=select > id,name,master,last_check,notified_serial,type from domains where > name='%s' > > i'm pretty sure it's one of these. Changing these didn't help, same error. I enabled the query log on the mysql server which shows powerdns running the following query: select content from domains, domainmetadata where domainmetadata.domain_id=domains.id and name='<munged>' and domainmetadata.kind='SOA-EDIT' This corresponds to the "get-domain-metadata-query" setting. The doc on metadata however states: "Domain metadata is only available for DNSSEC capable backends! Make sure to enable the proper '-dnssec' setting to benefit, and to have performed the DNSSEC schema update." I did not enable gmysql-dnssec - so why is pdns trying to run this query? -- message transmitted on 100% recycled electrons _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
