On Wed, Feb 17, 2016 at 03:47:57PM +0000, Marc van de Geijn wrote:
> Unfortunatly, the serial is updated on the master and synced to the slaves,
> but the slaves keep reporting the NSEC3 & RRSIG records. The master does not
> report these records when doing a AXFR from the slaves.
Can you show the actual output of 'pdnssec show-zone' on both master and
slave please?
Bert
>
> Met vriendelijke groet,
>
> Marc van de Geijn
> bHosted.nl
>
> Mail: [email protected]
> Tel: 020 3118211
> Facebook: https://www.facebook.com/bHosted.nl.Webhosting
> Twitter: https://twitter.com/bhostednl
>
> -----Oorspronkelijk bericht-----
> Van: bert hubert [mailto:[email protected]]
> Verzonden: woensdag 17 februari 2016 16:41
> Aan: Marc van de Geijn <[email protected]>
> CC: [email protected]
> Onderwerp: Re: [Pdns-users] Removing Dnssec records from slave PDNS servers
>
> On Wed, Feb 17, 2016 at 06:27:59AM -0700, mvdgeijn wrote:
> > Hi,
> >
> > I was wondering what the best way is to remove Dnssec records from the
> > slave PDNS servers? Our master and slave DNS servers are all PowerDNS
> > servers.
> > They are kept in sync using AXFR and are all on different locations.
> >
> > At this moment it seems that when I disable Dnssec on the master for a
> > domain, this information is not transferred to the slave DNS servers.
>
> Increase the serial (pdnssec increase-serial is an easy way, or pdnsutil on
> 4.x).
>
> That should trigger the slave to refetch without the DNSSEC.
>
> Bert
_______________________________________________
Pdns-users mailing list
[email protected]
http://mailman.powerdns.com/mailman/listinfo/pdns-users
