On Tue, Nov 04, 2014 at 03:53:47PM +0100, Oli Schacher wrote: > On Tue, 4 Nov 2014 16:02:43 +0200 > Aki Tuomi <cmo...@youzen.ext.b2.fi> wrote: > > > On Tue, Nov 04, 2014 at 02:32:34PM +0100, Oli Schacher wrote: > > > On Tue, 4 Nov 2014 15:10:28 +0200 > > > Aki Tuomi <cmo...@youzen.ext.b2.fi> wrote: > > > > > > > > Domain table is consulted in some cases, not metadata. You need to > > > > fix those queries as well, and permit read access to the domains > > > > table. > > > > > > > > Aki > > > > > > Which additional queries do I have to fix? The documentation on > > > http://doc.powerdns.com/html/generic-mypgsql-backends.html states > > > that only the basic queries are used if I don't enable features like > > > dnssec and master/slave. > > > > > > Of course I could just override all queries listed there, but I'd > > > really like to know why this configuration works on two servers but > > > not on the third. Could you give an example situation which would > > > cause the domains table to be queried and cause this error? > > > > > > Thanks > > > Oli > > > > > > > Look at the > > > > # gmysql-get-all-domains-query Retrieve all domains > > # gmysql-get-all-domains-query=select domains.id, domains.name, > > records.content, domains.type, domains.master, > > domains.notified_serial, domains.last_check from domains LEFT JOIN > > records ON records.domain_id=domains.id AND records.type='SOA' AND > > records.name=domains.name WHERE records.disabled=0 OR %d # > > gmysql-info-zone-query=select > > id,name,master,last_check,notified_serial,type from domains where > > name='%s' > > > > i'm pretty sure it's one of these. > > Changing these didn't help, same error. I enabled the query log on > the mysql server which shows powerdns running the following > query: > > select content from domains, domainmetadata where > domainmetadata.domain_id=domains.id and name='<munged>' and > domainmetadata.kind='SOA-EDIT' > > This corresponds to the "get-domain-metadata-query" setting. The doc > on metadata however states: "Domain metadata is only available for > DNSSEC capable backends! Make sure to enable the proper '-dnssec' > setting to benefit, and to have performed the DNSSEC schema update." > > I did not enable gmysql-dnssec - so why is pdns trying to run this > query? >
Apparently this has been changed in latest version, and documentation has not been updated to reflect this change. Sorry about this. Aki > > -- > message transmitted on 100% recycled electrons > > _______________________________________________ > Pdns-users mailing list > Pdns-users@mailman.powerdns.com > http://mailman.powerdns.com/mailman/listinfo/pdns-users > _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
