Re: [Pdns-users] Logging outgoing queries and responses

2021-08-04 Thread Kenneth Marshall via Pdns-users
> I Removed [Brackets], > > But problem exists > > Aug 4 14:40:19 localhost pdns_recursor: STL Exception: [string "chunk"]:1: > ')' expected near '=' > > Aug 4 14:40:19 localhost pdns_recursor: Unable to load Lua script from > '/etc/pdns-recursor/lua.conf': [string "chunk"]:1: ')' expected ne

Re: [Pdns-users] AXFR Zone Transfer Problem

2021-01-08 Thread Kenneth Marshall via Pdns-users
On Fri, Jan 08, 2021 at 09:04:23PM +, Ralph via Pdns-users wrote: > Is it possible to put the pdns-auth in front, so that every request for which > we are not responsible for gets forwarded to the pdns-recursor? > Hi Ralph, It used to be, but that had its own set of issues and it is no long

Re: [Pdns-users] AXFR Zone Transfer Problem

2021-01-08 Thread Kenneth Marshall via Pdns-users
On Fri, Jan 08, 2021 at 04:47:29PM +, Ralph via Pdns-users wrote: > Hi Brian, > > Thank you for the fast response. > Exactly, recursor runs on port 53. Pdns-auth runs on the same ip with port > 5300. > > Is this even possible to add a port to the master ip on the slave ? > > As I understood

Re: [Pdns-users] AXFR Zone Transfer Problem

2021-01-08 Thread Kenneth Marshall via Pdns-users
On Fri, Jan 08, 2021 at 04:22:14PM +, Ralph via Pdns-users wrote: > Hi @all, > > i need your help with my configuration. > I configured PowerDNS Auth and recursor on one vm. Everything works fine - > recursion, authoritative zone etc > > BUT i have a big problem with zone transfers. > When t

Re: [Pdns-users] pdns + recursor + master / slave

2020-02-01 Thread Kenneth Marshall
On Sat, Feb 01, 2020 at 06:13:26PM +0100, Stef Coene wrote: > Hi, > > I'm new to PowerDNS and still learning about how it works. > > I want to have 2 DNS servers located in 2 different datacenters. One > of them is master, one of them is slave. They both need to forward > requests for unknown dom

Re: [Pdns-users] max record length workaround

2019-03-20 Thread Kenneth Marshall
> On Mar 20, 2019, at 19:37, Jonathan Reed wrote: > > >> TXT records are limited to strings of 255 characters or less, but can have > >> multiple strings, They'll be concatenated in order by the DKIM validator - > >> I'm guessing that's what you're thinking of. > > Yes, indeed. > > > > My pub

Re: [Pdns-users] PDNS and Isilon Smartconnect Delegation

2018-12-13 Thread Kenneth Marshall
On Thu, Dec 13, 2018 at 02:17:23PM -0500, Ian Easter wrote: > Recently switched from BIND9.7.3 to PowerDNS and working through some > adjustments. > > We previously followed the guidelines for DNS based on the documentation: > https://www.emc.com/collateral/hardware/white-papers/h8316-wp-smartconn

Re: [Pdns-users] pdns-recursor 3.7.4 on Redhat Linux always returns SERVFAIL for AAAA lookups

2017-08-16 Thread Kenneth Marshall
On Wed, Aug 16, 2017 at 06:39:22PM +0200, Peter van Dijk wrote: > Hello Kenneth, > > On 16 Aug 2017, at 18:11, Kenneth Marshall wrote: > > >pdns_recursor[3935]: DNS parser error (a.b.c./ from > >127.0.0.1): a.b.c., Parsing record content: missing field at the

Re: [Pdns-users] pdns-recursor 3.7.4 on Redhat Linux always returns SERVFAIL for AAAA lookups

2017-08-16 Thread Kenneth Marshall
On Wed, Aug 16, 2017 at 05:15:41PM +0100, Brian Candler wrote: > On 16/08/2017 17:11, Kenneth Marshall wrote: > >I am investigating a caching problem and the cause is that > >the 3.7.4 recursor returns a SERVFAIL error for a lookup. > >The record does not exist,

[Pdns-users] pdns-recursor 3.7.4 on Redhat Linux always returns SERVFAIL for AAAA lookups

2017-08-16 Thread Kenneth Marshall
Hi PDNS users, I am investigating a caching problem and the cause is that the 3.7.4 recursor returns a SERVFAIL error for a lookup. The record does not exist, but an A record does. According to my reading: https://www.ietf.org/rfc/rfc4074.txt to have DNS cache applications realize that

[Pdns-users] Disable pdns-recursor caching for a single forwarded domain

2017-07-20 Thread Kenneth Marshall
Hi PDNS community, I am currently running pdns-recursor version 3.7.4 and am trying to disable caching for a single forwarded domain. I am current trying to use the following lua script but although being called, the setvariable() call does not seem to turn off the caching. I would expect each cal

Re: [Pdns-users] TSIG updates fail with NOAUTH error

2016-09-14 Thread Kenneth Marshall
On Wed, Sep 14, 2016 at 06:23:30PM +0300, Aki Tuomi wrote: > On Wed, Sep 14, 2016 at 09:52:30AM -0500, Kenneth Marshall wrote: > > Hi, > > > > I am trying to get TSIG updates to work to a pdns-3.4.9 slave and > > they fail with a NOAUTH error. It looks like even though

[Pdns-users] TSIG updates fail with NOAUTH error

2016-09-14 Thread Kenneth Marshall
Hi, I am trying to get TSIG updates to work to a pdns-3.4.9 slave and they fail with a NOAUTH error. It looks like even though the key is correct and allowed in the domainmetadata that because it is designated a 'SLAVE' in the domains table the update is failing. In order to manage services inter

Re: [Pdns-users] PowerDNS Backend MySQL QPS

2016-07-19 Thread Kenneth Marshall
On Tue, Jul 19, 2016 at 03:41:37AM +0700, Genzo Rey wrote: > Dear All, > > I'm looking for new Nameserver solutions for my company. I build 1 VPS > PowerDNS 512 MB RAM and 1 VPS MySQL 512MB RAM to test performance (qps). > This is my results: > > [Status] Sending queries (to 192.168.10.143) > [St

Re: [Pdns-users] Documentation on populating backend database tables

2011-04-24 Thread Kenneth Marshall
On Sun, Apr 24, 2011 at 07:32:40AM +, Sebastian Tennant wrote: > Quoth Kenneth Marshall : > > Here is a basic desciption of the fields and queries that PDNS uses: > > > > http://doc.powerdns.com/generic-mypgsql-backends.html#id587910 > > Thanks. I see now. T

Re: [Pdns-users] LUA Question

2011-04-23 Thread Kenneth Marshall
On Sat, Apr 23, 2011 at 12:11:10PM +0100, John Macleod wrote: > Does anyone have any LUA examples for the PDNS-Recursor to provide > functionality similar to views in BIND? I need to control the A record > for a set of zones based on the query source IP address. > > > Thanks in advance! > > Joh

Re: [Pdns-users] Documentation on populating backend database tables

2011-04-22 Thread Kenneth Marshall
On Fri, Apr 22, 2011 at 09:18:45PM +, Sebastian Tennant wrote: > > How, for example, do I set up pdns as an authoritative name server for foo.com > and publish the addresses of two subdomains (ns1 and ns2): > > My guess would be something like this: > > INSERT INTO domains (name,type) VALUE

Re: [Pdns-users] DNS resolution problem with pdns-recursor-3.3

2011-04-21 Thread Kenneth Marshall
On Thu, Apr 21, 2011 at 09:20:10AM -0500, Kenneth Marshall wrote: > On Thu, Apr 21, 2011 at 03:39:57PM +0200, bert hubert wrote: > > Kenneth, > > > > Can you reproduce the issue with > > http://svn.powerdns.com/snapshots/pdns-recursor-3.4-pre.tar.bz2 ?

Re: [Pdns-users] DNS resolution problem with pdns-recursor-3.3

2011-04-21 Thread Kenneth Marshall
On Thu, Apr 21, 2011 at 03:39:57PM +0200, bert hubert wrote: > Kenneth, > > Can you reproduce the issue with > http://svn.powerdns.com/snapshots/pdns-recursor-3.4-pre.tar.bz2 ? > > I can resolve cdn4.digitalconcerthall.com reliably with it here. > > Bert > Hi Bert, I still get the same

Re: [Pdns-users] DNS resolution problem with pdns-recursor-3.3

2011-04-21 Thread Kenneth Marshall
Okay, I am reposting this with a compressed attachment since the original was too big for the list. Ken - Forwarded message from Kenneth Marshall - Date: Thu, 21 Apr 2011 08:24:34 -0500 From: Kenneth Marshall To: bert hubert Cc: pdns-users@mailman.powerdns.com Subject: Re: [Pdns

Re: [Pdns-users] DNS resolution problem with pdns-recursor-3.3

2011-04-20 Thread Kenneth Marshall
On Tue, Apr 19, 2011 at 04:41:22PM -0500, Kenneth Marshall wrote: > On Tue, Apr 19, 2011 at 08:41:46PM +0200, bert hubert wrote: > > On Tue, Apr 19, 2011 at 01:24:37PM -0500, Kenneth Marshall wrote: > > > Hi PDNS users, > > > > > > I have been trying to

Re: [Pdns-users] DNS resolution problem with pdns-recursor-3.3

2011-04-19 Thread Kenneth Marshall
On Tue, Apr 19, 2011 at 08:41:46PM +0200, bert hubert wrote: > On Tue, Apr 19, 2011 at 01:24:37PM -0500, Kenneth Marshall wrote: > > Hi PDNS users, > > > > I have been trying to figure out why the following site is > > not resolving: > > > > > dig cdn4.d

[Pdns-users] DNS resolution problem with pdns-recursor-3.3

2011-04-19 Thread Kenneth Marshall
Hi PDNS users, I have been trying to figure out why the following site is not resolving: > dig cdn4.digitalconcerthall.com ; <<>> DiG 9.2.4 <<>> cdn4.digitalconcerthall.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 40777 ;; flags: qr rd ra;

Re: [Pdns-users] master-slave serial problem

2011-03-25 Thread Kenneth Marshall
On Fri, Mar 25, 2011 at 02:23:09PM +0300, Vasiliy G Tolstov wrote: > Hello. I'm use centos pdns server package. It contains error, that fixed > in 2077 revision of svn. How can i get patched version of centos rpm ? > Does anybody backport major patches to old powerdns releases ? > > -- > Vasiliy

Re: [Pdns-users] Heading up to PowerDNS Authoritative Server release 3.0: please check your open tickets

2011-03-23 Thread Kenneth Marshall
Hi Nick, As nice as it would be to have unlimited development resources, that is never the case. Since no community member has stepped up to work on the LDAP backend and PowerDNS.com does not have funds to work on the LDAP backend, it is better to go ahead and mark them as closed/wontfix. If an en

Re: [Pdns-users] low TTL, recursor and preresolve

2011-03-22 Thread Kenneth Marshall
On Tue, Mar 22, 2011 at 09:09:13AM -0700, Alfred B. M. Cordero wrote: > On Thu, 17 Mar 2011 10:50:00 -0700 Kenneth Marshall > wrote: > > > >You might be interested in this pre-release version that supports > >what I described: > > > >http://mailman.po

Re: [Pdns-users] low TTL, recursor and preresolve

2011-03-17 Thread Kenneth Marshall
On Thu, Mar 17, 2011 at 10:44:37AM -0700, Alfred B. M. Cordero wrote: > There was a suggestion to try to alter a low TTL using the lua > feature. > This may be common knowledge but it may help someone else. > > The preresolve function takes a request and does something based on > some conditiona

Re: [Pdns-users] How to define minimum TTL for any domain?

2011-03-16 Thread Kenneth Marshall
On Wed, Mar 16, 2011 at 10:11:04AM -0700, Alfred B. M. Cordero wrote: > There is a domain that has a 60 second TTL. This is too low for us. > The minimum needs to be made higher. Can we do with powerdns? If > this allowed by the RFC to have it 60 seconds but it doesn't seem > well. The settings

Re: [Pdns-users] Some sites are not resolving

2011-03-15 Thread Kenneth Marshall
On Tue, Mar 15, 2011 at 11:52:34AM +, Maroon Ibrahim wrote: > > > Dear Sirs, > I have PDNS Recursor installed and everything is working properly except the > following problem > I can't resolve www.indevcogroup.com knowing that if I use our ISP's DNS it > will resolve normally... is there a

Re: [Pdns-users] Mongo DB and Powerdns

2011-03-15 Thread Kenneth Marshall
On Tue, Mar 15, 2011 at 01:28:14PM +0100, bert hubert wrote: > On Mon, Mar 14, 2011 at 07:34:15PM +0100, Jan-Piet Mens wrote: > > To my knowledge there is no such back-end. What I have done is a > > PowerDNS pipe back-end to CouchDB. Performance is lousy of course, but I > > did it as a proof of co

Re: [Pdns-users] how do query the recursor cache to see what's in it?

2011-03-10 Thread Kenneth Marshall
On Thu, Mar 10, 2011 at 10:44:12AM -0800, Alfred B. M. Cordero wrote: > On Thu, 10 Mar 2011 10:25:14 -0800 Kenneth Marshall > wrote: > > > >Wow! That is not a lot of bandwidth. If you are pegging your > > It depends. > > >cap, responses may be taking a longer

Re: [Pdns-users] how do query the recursor cache to see what's in it?

2011-03-10 Thread Kenneth Marshall
On Thu, Mar 10, 2011 at 08:49:02AM -0800, Alfred B. M. Cordero wrote: > > > >Another source of network problems could be caused by a > >firewall device that tries to be too smart and either > >delays the traffic or outright mutilates it. I do not > >know your setup, but we dealt with an issue cause

Re: [Pdns-users] how do query the recursor cache to see what's in it?

2011-03-10 Thread Kenneth Marshall
On Wed, Mar 09, 2011 at 03:13:03PM -0800, Alfred B. M. Cordero wrote: > On Wed, 09 Mar 2011 14:30:23 -0800 Kenneth Marshall > wrote: > >You can use "rec_control dump-cache filename" but the > >recursor will not answer queries while that cache is being > >du

Re: [Pdns-users] how do query the recursor cache to see what's in it?

2011-03-09 Thread Kenneth Marshall
On Wed, Mar 09, 2011 at 02:19:48PM -0800, Alfred B. M. Cordero wrote: > Hello, > Is there a way to see what is in the recursor 3.3 cache? > A command or tool? > > Is there a web page that shows results of tests for nightly > pdns recursor builds? > > We see that if the network is busy that the re

Re: [Pdns-users] stuck tcp sessions on recursor

2011-02-24 Thread Kenneth Marshall
On Thu, Feb 24, 2011 at 01:20:13PM -0500, Charles Sprickman wrote: > Howdy, > > I'm seeing an issue with tcp queries on powerdns recursor 3.2. We run two > instances of pdns recursor on an internal network and it's mainly hit by > lots of qmail delivery servers. They are doing a ton of lookups,

Re: [Pdns-users] Challenge with DNS rewrite

2011-02-24 Thread Kenneth Marshall
On Thu, Feb 24, 2011 at 01:10:31PM +0100, Hugo van der Kooij wrote: > > > Hi, > > How feasable is it to create a PowerDNS caching name server > that can rewrite all requests to a specific non-existing top level > domain and strip that top level domain from the request before passing > it on tow

Re: [Pdns-users] Recursor: Different answers for the same query

2011-01-26 Thread Kenneth Marshall
They scale much more linearly if they do not need to share the cache. See the release notes. Cheers, Ken On Wed, Jan 26, 2011 at 11:03:17AM -0800, David Hawthorne wrote: > They don't share the same cache? What's the reasoning behind that? > > On Jan 26, 2011, at 1:55 AM, bert hubert wrote: > >

Re: [Pdns-users] DNSSec for other backends?

2011-01-26 Thread Kenneth Marshall
Hi Nick, I think that the major benefit of PowerDNS is its ability to support a wide range of database backends, including LDAP through Norbert's work. Each of the various backends support some, most or all of the features of pdns, depending on their individual driver. The available features are l

Re: [Pdns-users] Performance of pdns authoritative server on big machines with different backends

2011-01-04 Thread Kenneth Marshall
On Tue, Jan 04, 2011 at 03:50:50PM +0100, Marc Haber wrote: > On Tue, Jan 04, 2011 at 08:38:57AM -0600, Kenneth Marshall wrote: > > Have you tried running multiple PDNS servers at once with possibly > > multiple MySQL backends as needed to scale? > > Isn't threading b

Re: [Pdns-users] Performance of pdns authoritative server on big machines with different backends

2011-01-04 Thread Kenneth Marshall
On Tue, Jan 04, 2011 at 03:20:44PM +0100, Marc Haber wrote: > Hi, > > in my current project, I have the task of finding out which > performance to expect from a PowerDNS authoritative server running on > a big machine. > > My test box is an HP DL 360 G6 with two quad core hyperthreading CPUs > (s

Re: [Pdns-users] Internal PowerDNS Install?

2010-12-23 Thread Kenneth Marshall
On Wed, Dec 22, 2010 at 04:30:01PM -0700, IFM Lists wrote: > This may be more of a general DNS question, if so forgive me. I'm somewhat a > DNS in many ways. (Software engineer, sysadmin when my arm is twisted.) > > I've been using PDNS for providing DNS services for publicly-available names >

Re: [Pdns-users] Additional records

2010-12-08 Thread Kenneth Marshall
On Wed, Dec 08, 2010 at 04:30:35PM -0700, Pete Stapley wrote: > When I query the SOA record for a domain from a bind server I receive this. > > > set type=SOA > > yahoo.com > Server: ns.domain1.com > Address:1.2.3.4#53 > > Non-authoritative answer: > yahoo.com > origin = ns1

Re: [Pdns-users] Outgoing timouts problem (?)

2010-12-04 Thread Kenneth Marshall
On Sat, Dec 04, 2010 at 12:03:05PM +0200, Nick Milas wrote: > Hi all, > > I have just entered full production running, with pdns 9.22 and recursor > 3.3 on two servers with ldap backend (openldap replicated with syncrepl). > > Can someone please give some info on outgoing timeouts (which seem > s

Re: [Pdns-users] Can't make AXFR work with LDAP backend

2010-12-03 Thread Kenneth Marshall
On Fri, Dec 03, 2010 at 12:43:53PM +0100, David Douard wrote: > Hi everybody, > > I am using PowerDNS from Debian Squeeze with LDAP backend. > > The problem is that I have never been able make AXFR dig. I have the problem > for years now, but until now, I never really need to make it work. But I

Re: [Pdns-users] Cache Problems with upgrade to Recursor 3.3

2010-12-01 Thread Kenneth Marshall
On Wed, Dec 01, 2010 at 12:40:40PM -0600, Jeremy Utley wrote: > Good afternoon, > > We've been working on upgrading our recursors from pdns-recursor-3.1.7.1-1 > to pdns-recursor-3.3-1, and have seen some oddities I wanted to ask the > list about. First, a basic rundown of our environment: > > Ou

Re: [Pdns-users] Failed to compile Recursor on Solaris 10 Sparc

2010-11-12 Thread Kenneth Marshall
I think you need to use a more advanced CPU setting. It looks like you are using a processor without atomic operations. Pretty much anything better than i386 will work. Cheers, Ken On Fri, Nov 12, 2010 at 12:08:02PM +0100, Udo Zumdick wrote: > Hello everybody, > > I tried several times to compil

Re: [Pdns-users] Split-Horizon: how to implement?

2010-11-11 Thread Kenneth Marshall
You should be able to use the pipe backend to handle this. Cheers, Ken On Thu, Nov 11, 2010 at 11:44:27AM +0100, Cristian Cappelletti wrote: > Hello to all, > > We plan to switch our DNS servers, BIND-based to PowerDNS. > > Crucial point for us is to implement Split-Horizon, aka views in bind/n

Re: [Pdns-users] pdns and default-ttl option

2010-11-04 Thread Kenneth Marshall
On Thu, Nov 04, 2010 at 02:53:00PM -0600, Derrik Pates wrote: > On 11/4/10 2:30 PM, abang wrote: >> See http://doc.powerdns.com/built-in-recursor.html >> >> max-cache-ttl >> >> Maximum number of seconds to cache an item in the DNS cache, no matter >> what the original TTL specified.

Re: [Pdns-users] pdns and default-ttl option

2010-11-04 Thread Kenneth Marshall
On Thu, Nov 04, 2010 at 01:15:07PM -0600, Derrik Pates wrote: > On 11/4/10 12:47 PM, Dmitriy Lyfar wrote: >> I use pdns with own implemented backend. Queries which is not recognised >> by my backend are redirected to the >> pdns-recursor. I'd like to change TTL value for all queries and found >> de

Re: [Pdns-users] tinydns to pdns

2010-10-15 Thread Kenneth Marshall
On Fri, Oct 15, 2010 at 09:39:30AM -0400, Mouncif Benniane wrote: > does anyone know how to migrate tindydns zones to pdns with mysql backend? I > couldn't find it anywhere! > > Thanks! One method is to set up a PDNS server as a super-slave to the tinydns server. Add it as a NS to each zone. The

Re: [Pdns-users] Differences between slave and superslave

2010-09-14 Thread Kenneth Marshall
Hi Francis, You do not want just any nameserver to be able to populate zones for your servers. The supermaster table is used to define which servers can do this -- these would be the servers you manage or trust. Cheers, Ken On Tue, Sep 14, 2010 at 01:25:42PM +0200, Francis Ram?rez Verdugo wrote:

Re: [Pdns-users] Successful, yet incomplete AXFR to BIND9 slave

2010-09-09 Thread Kenneth Marshall
Hi Nikolaos, A small suggestion, it is much easier to read posts to mailing lists if they are in text format and not html/doc/pdf/... This is what I see. :) Cheers, Ken On Thu, Sep 09, 2010 at 01:59:41PM +0300, Nikolaos Milas wrote: > > > > > > > I found the answer here: >

[Pdns-users] use of pdnslog() in pdns-recursor lua scripts

2010-07-16 Thread Kenneth Marshall
Hello PDNS community, I have been trying to get the pdnslog() function to work in my lua script for the pdns-recursor. Here is my current script. Originally it was like the example script: function preresolve ( remoteip, domain, qtype ) print ("prequery handler called for: ", remoteip, ge

Re: [Pdns-users] Slave zone just won't refresh....

2010-06-09 Thread Kenneth Marshall
0 5:49 AM, Kenneth Marshall wrote: > >>> another issue that I've run into was another slave zone. This had pdns >>> cycling every 2-3 seconds >>> >>> Jun 7 00:48:44 ns1 pdns[10216]: Initiating transfer of 'axxxa.us' >>> from >&

Re: [Pdns-users] Slave zone just won't refresh....

2010-06-09 Thread Kenneth Marshall
On Tue, Jun 08, 2010 at 05:33:26PM -0700, Gary Shaver wrote: > > Before I pull much more hair out, I thought I'd toss this up to the list to > see if anyone has experienced this in the past (or has better google-foo > than I) > > I'm slaving a zone from 208.78.69.112, I'm able to pull the zone ma

Re: [Pdns-users] TCP Connection Thread died because of STL error: Reading data: Connection reset by peer

2010-05-27 Thread Kenneth Marshall
Yes. As Seth pointed out, the generic-* backend does not support Autoserial. Try the OpenDBX backend which has Autoserial support since 2.9.22. Regards, Ken On Wed, May 26, 2010 at 09:22:47PM -0700, Seth Mattinen wrote: > On 5/26/10 6:29 AM, David J Craigon wrote: > > > > Any idea how to get aut

Re: [Pdns-users] pdns forwarding problem

2010-01-07 Thread Kenneth Marshall
On Thu, Jan 07, 2010 at 04:08:15PM +0100, Tobias Winter wrote: > Hi there, > > I'm not particulary used to configuring a nameserver, so I will first > state what I'm trying to accomplish and how I intend to get the job > done. Please correct me, if I am misguided in some way or just missed > somet

Re: [Pdns-users] Reliable supermaster setup - howto?

2009-10-23 Thread Kenneth Marshall
On Fri, Oct 23, 2009 at 03:00:08PM +0200, Przemyslaw Wegrzyn wrote: > Kenneth Marshall wrote: >> The supermaster functionality works well for this. If you are using >> PostgreSQL as the DB backend, you may want to consider using the >> patch I posted to PDNS giving you the op

Re: [Pdns-users] Reliable supermaster setup - howto?

2009-10-23 Thread Kenneth Marshall
On Fri, Oct 23, 2009 at 01:47:54PM +0200, Przemyslaw Wegrzyn wrote: > Angel Bosch Mora wrote: >> >> forget about all this master-propagates-slaves stuff. >> > It's behaving so badly, or is unreliable, or not supported by developers, > or... ? >> i use ldap backend and i have lot of 389 Director

Re: [Pdns-users] Odd master/slave behavior for large domains

2009-09-11 Thread Kenneth Marshall
Hi Bert, I do not know if you saw my post on this problem earlier today, but I do not think that there is a bug in the PDNS PostgreSQL support, per se. I spent a bit of time with pdns's PostgreSQL backend debugging the AXFR transfer problem that I described in my earlier E-mail today. I performed

Re: [Pdns-users] Odd master/slave behavior for large domains

2009-09-11 Thread Kenneth Marshall
Hi Thomas, I have read your post and your transfer problem is caused by the OOM killer. You should not be running out of memory on a database server. That is the first problem. Regarding the AXFR transfers when PDNS is a slave, the process used is to delete all the records in the zone and then re-

Re: [Pdns-users] Difficulty changing nameservers on domain registar's site

2009-07-02 Thread Kenneth Marshall
>> doesn't address the issue of the registrar not being able to reach the > >> secondary NS, which is on an entirely different server and has a separate > >> IP > >> address. This doesn't appear, as you suggested when I posted my last > >> question

Re: [Pdns-users] Difficulty changing nameservers on domain registar's site

2009-07-02 Thread Kenneth Marshall
erver and has a separate >> IP address. This doesn't appear, as you suggested when I posted my last >> question about how PDNS works differently from BIND and again in this >> post, as my lack of understanding DNS. I'm new to PDNS, not to DNS. I >> couldn't h

Re: [Pdns-users] Difficulty changing nameservers on domain registar's site

2009-07-02 Thread Kenneth Marshall
On Thu, Jul 02, 2009 at 09:15:03AM -0400, SashaB wrote: > Hello all, > > This is a long post with a lot of info since I thought you should know as > much as possible about these NS before (a) having to ask the obvious > questions and (b) so you can offer suggestions. > > Here's the situation. I h

Re: [Pdns-users] SIGSEGV after some AXFR queries

2009-06-29 Thread Kenneth Marshall
Marek, Version 2.9.20 is pretty old, so maybe this problem is fixed in a later release. I know that I have seen this sort of problem when bad data was in the database. Maybe you could try validating the data for the zone that is being requested by the AXFR? Just a thought. Regards, Ken On Mon, J

Re: [Pdns-users] PDNS Newbie Config File Questions

2009-06-22 Thread Kenneth Marshall
On Mon, Jun 22, 2009 at 02:46:59PM -0400, SashaB wrote: > Hello All, > > Would you kindly provide your expertise on the following? > > 1) What are the most important features/configuration options to > enable/configure in PDNS before using it and how best are these > configuration options done? >

Re: [Pdns-users] ixfr support for slaves with large zones

2009-03-19 Thread Kenneth Marshall
On Thu, Mar 19, 2009 at 03:52:34PM +0100, Sean Boran wrote: > Hi, > > I have a pdns slave to a very large zone (and I do not have administrative > access to the master server), where the serial changes almost every second. > This means that the entire zone keeps being sent. The ixfr protocol, seem

Re: [Pdns-users] Why prefer recursor answers over auth Authoritative answers?

2009-02-06 Thread Kenneth Marshall
On Fri, Feb 06, 2009 at 07:43:51AM +0100, Sean Boran wrote: > Hi, > > I cannot answer the recursive query, but I'm am also designing a setup to > replace Bind with split zones. The idea was to replace bind entirely. Maybe > we should share some design ideas? > > Current I have two internet ns wit

Re: [Pdns-users] Desaster recovery of primary nameserver

2008-12-10 Thread Kenneth Marshall
Dump the SQLite DB and import the results into your MySQL DB. Or as another poster suggested, make the broken master a slave of the other and notify to send the zones. We used the latter method to migrate from a BIND master to PDNS originally. Good luck. Ken On Wed, Dec 10, 2008 at 01:36:58AM +02

Re: [Pdns-users] pipe backend + slave + bad zones = bug

2008-10-30 Thread Kenneth Marshall
On Thu, Oct 30, 2008 at 10:59:24AM -0700, [EMAIL PROTECTED] wrote: > Kenneth Marshall wrote: >> As you have found out, PowerDNS trusts its backend data completely and >> expects it to be correct. You need to fix your zones and put mechanisms >> in place to prevent the ent

Re: [Pdns-users] pipe backend + slave + bad zones = bug

2008-10-30 Thread Kenneth Marshall
On Wed, Oct 29, 2008 at 05:18:43PM -0700, [EMAIL PROTECTED] wrote: > Hi, > > I have a slave PowerDNS server which uses a pipe and gmysql backend. Two of > the zones on the master have out of zone-data that PowerDNS (rightfully) > does not like. Whenever PowerDNS tries to AXFR those domains, it al

Re: [Pdns-users] PDNS-Recursor Not Providing DNS Lookups?

2008-08-22 Thread Kenneth Marshall
On Fri, Aug 22, 2008 at 07:42:31PM +0200, bert hubert wrote: > On Fri, Aug 22, 2008 at 12:30:36PM -0400, Steve Chapman wrote: > > I'm working in an environment that uses split DNS (some parentcompany.com > > servers we want resolved from corporate DNS servers, others from Internet > > DNS servers).

Re: [Pdns-users] NS caching bug reappears in recursor 3.1.6

2008-05-21 Thread Kenneth Marshall
; From: [EMAIL PROTECTED] on behalf of Kenneth Marshall > Sent: Tue 5/20/2008 1:56 PM > To: Darren Gamble > Cc: pdns-users@mailman.powerdns.com > Subject: Re: [Pdns-users] NS caching bug reappears in recursor 3.1.6 > > > > Yes, I know. Unfortunately, I will need to setup

Re: [Pdns-users] NS caching bug reappears in recursor 3.1.6

2008-05-20 Thread Kenneth Marshall
Yes, I know. Unfortunately, I will need to setup a similar environment to try and reproduce the problem since the work-around is in place. Once I have a test setup working, I will send another E-mail to the list. Thanks. Ken On Tue, May 20, 2008 at 02:48:39PM -0600, Darren Gamble wrote: > Hi Kenn

Re: [Pdns-users] NS caching bug reappears in recursor 3.1.6

2008-05-18 Thread Kenneth Marshall
Hello, I would just like to add a report of my own regarding a caching problem with version 3.1.6. I am not sure of the exact details, but the scenario involves our main PDNS server serving rice.edu and a subdomain xxx.rice.edu. The default ttl of rice.edu was 3600 and it was 86400 for xxx.rice.ed

Re: [Pdns-users] Nameservers are same domain as a domain that uses them - subdomains don't work!

2008-04-28 Thread Kenneth Marshall
cord, PowerDNS is returning the SOA record. > > the mysportsite.com domain record has NS records so wouldn't those > propagate to any subdomains defined in that record? > > Could there be any weird pdns.conf settings I need to use when your > nameservers are the same

Re: [Pdns-users] Nameservers are same domain as a domain that uses them - subdomains don't work!

2008-04-28 Thread Kenneth Marshall
Brandon, I think that any subdomain will need NS and SOA records. You should be able to define A records in your parent domain without these: NS mydomain.com ns1.mydomain.com A turkey.mydomain.com in domain mydomain.com A turkey.chicken.mydomain.com in domain mydomain.com It works for me with v

Re: [Pdns-users] problems resolving 'juniper.net' in 3.1.5?

2008-04-18 Thread Kenneth Marshall
I tried this on the one server having a problem, but when I sent a USR2 signal to the recursor it worked. Ken On Fri, Apr 18, 2008 at 05:10:06PM +0200, bert hubert wrote: > Hi everybody, > > Over at #powerdns on IRCnet we are currently trying to debug a problem where > heavily loaded PowerDNS 3.

Re: [Pdns-users] Re: DNSKEY query with mysql backend gives "Authoritative empty NO ERROR"

2008-04-15 Thread Kenneth Marshall
I thought that I had already seen a reply, but type should be the text version and not the number. You may wish to read the PDNS documentation describing the DB record structure. Cheers, Ken On Tue, Apr 15, 2008 at 06:01:20PM +0200, Andrew Wade wrote: > Nobody else can give me any further advice?

Re: [Pdns-users] problems with superslave pdns

2008-02-18 Thread Kenneth Marshall
Just to allay any concerns you may have about your DB backend, we are using PostgreSQL similarly without any problems. Ken On Mon, Feb 18, 2008 at 01:49:44PM -0800, Eugene Pefti wrote: > Hi Anton, > > PDNS forum seems to be not very active whenever one asks for help. Moreover > there's a tende

Re: [Pdns-users] Backend error: Failed to executemysql_query,perhaps connection died? Err=1: MySQL server has goneaway

2008-01-29 Thread Kenneth Marshall
around, not a true fix. You should still monitor pdns virtual memory usage > from time to time to make sure it isn't getting crazy. > > - Original Message - From: "Kenneth Marshall" <[EMAIL PROTECTED]> > To: "Stephen Manchester" <[EMAIL PROTECTED]

Re: [Pdns-users] Backend error: Failed to execute mysql_query,perhaps connection died? Err=1: MySQL server has gone away

2008-01-29 Thread Kenneth Marshall
onnection reconnects in the future, > which solves both the memory leak and the backends failing when the > connection is closed. The only solution I found was to apply a patch and > compile from source. > > ----- Original Message - From: "Kenneth Marshall" <[EMAIL P

Re: [Pdns-users] Backend error: Failed to execute mysql_query, perhaps connection died? Err=1: MySQL server has gone away

2008-01-29 Thread Kenneth Marshall
On Tue, Jan 29, 2008 at 03:04:46PM +0200, Catalin Constantin wrote: > Hello, > > This is a funny question. > Mysql is FINE and it's up and running on localhost. > > Here is the startup log of PDNS. > Jan 29 14:59:05 k2 pdns[30294]: PowerDNS 2.9.20 (C) 2001-2006 > PowerDNS.COMBV (Mar 10 2007, 00:3

Re: [Pdns-users] Problem with powerdns(master) -> bind(slave)

2008-01-21 Thread Kenneth Marshall
Anton, First, I would recommend using 2.9.21 instead of 2.9.20 because of a resource problem with TCP connections that causes zone transfers to fail. Restarting the pdns server will get it working again. Second, PowerDNS assumes that all information in the DB backend is correct per the RFC and it

Re: [Pdns-users] Frontend for PowerDNS ?!

2007-12-20 Thread Kenneth Marshall
On Fri, Dec 21, 2007 at 12:28:34AM +1100, Duane wrote: > Jan-Piet Mens wrote: > > > 2. Disallow adding CNAME and other data. It kills BIND zone transfers ;-) > > Why does it? Wouldn't it be better to fix what ever real problem exists > then glossing over them and denying users full DNS functional

Re: [Pdns-users] Frontend for PowerDNS ?!

2007-12-19 Thread Kenneth Marshall
On Wed, Dec 19, 2007 at 03:59:52PM -0500, Joseph Dobransky wrote: > PowerAdmin is probably the best out of the bunch. Problem I ran into is > that it turns into quite the little turtle when the domain count is higher > than 1k. Also, I think the user features / functions could be seriously > ove

Re: [Pdns-users] Remote source address in xfer

2007-12-18 Thread Kenneth Marshall
On Tue, Dec 18, 2007 at 11:50:51PM +1000, Mark Constable wrote: > On Tuesday 18 December 2007 22:38:03 you wrote: > > it may or may not help, but check > > query-source address xx port 53; > > notify-source xx; > > transfer-source xx; > > Thanks for that hint. I tried both

Re: [Pdns-users] adding non-native replication to existing shared backend

2007-11-30 Thread Kenneth Marshall
On Wed, Nov 21, 2007 at 02:31:52PM -0800, Jeffrey Wong wrote: > Bandwidth is limited, so I don't want to have to send all the > replication logs to the extra server. And I need to send all the > replication logs to a different server dedicated to keeping a backup > of all the databases. > > Thank

Re: [Pdns-users] DynamicDNS/IXFR/Notify support?

2007-10-12 Thread Kenneth Marshall
On Fri, Oct 12, 2007 at 02:41:29PM +0200, Rene Bartsch wrote: > Hi, > > We're running MyDNS and ISC DHCPD 3.x on a subnet with public ip > addresses, but want to switch back to PowerDNS. > > > That means we need support for: > > 1. DynamicDNS (RFC 2136) to update the host IPs by DHCPD No. > >

Re: [Pdns-users] fail over for web server

2007-08-15 Thread Kenneth Marshall
Jean, One typical way to implement this is to use Nagios to monitor your web servers. Then if one goes offline, issue the appropriate update to the PDNS database. Ken On Wed, Aug 15, 2007 at 01:43:28PM +0200, Jean Chiappini wrote: > Hello, > > I setup a pdns with approximately 90 domains. For a

Re: [Pdns-users] recursor can't refresh the . records

2007-08-09 Thread Kenneth Marshall
This does not rule out the firewall. If there is a problem with connection establishment and tracking, you could conceivable exhaust a firewall resource which would have the same symptoms: the updates work for a period of time and then stop working. Our recursor instances are working properly for d

Re: [Pdns-users] Select of orphaned records with domainname

2007-07-20 Thread Kenneth Marshall
On Fri, Jul 20, 2007 at 04:02:52PM +0200, Christian Kuehn wrote: > > You can see, that there is only ONE A-record. > > Looking into the database I found the a.m. 7 records in the 'records'-table, > refering to the actual domain-table-record. > > Searching for the suspect addition record, I found

[Pdns-users] re: patch to improve SQL db AXFR performance

2007-05-31 Thread Kenneth Marshall
All, I forgot the changes to pdns/communicator.cc. Ken - --- pdns-2.9.21/pdns/communicator.cc2007-04-21 08:56:36.0 -0500 +++ pdns-2.9.21_AXFR/pdns/communicator.cc 2007-05-31 14:55:57.50704 -0500 @@ -94,7 +94,7 @@ di.backen

Re: [Pdns-users] patch to improve SQL db AXFR performance

2007-05-31 Thread Kenneth Marshall
On Thu, May 31, 2007 at 04:27:18PM +0200, Norbert Sendetzky wrote: > Hi Ken > > > That is enough motivation. Please let me know if you have any > > questions. I would like to have this functionality rolled into > > PDNS, but it seems that I am one of the few who would take > > advantage of it. In

[Pdns-users] patch to improve SQL db AXFR performance

2007-05-31 Thread Kenneth Marshall
Dear PDNS Users: I have posted this patch previously but would like to post this new version against 2.9.21. The changes are identical modulo code positions. Its motivation was initially to reduce the overhead and performance problems when using PDNS as the SLAVE DNS server with large domains. Pre

Re: [Pdns-users] trying to retrieve/refresh

2007-05-31 Thread Kenneth Marshall
Tim, You need to put the IP address of the master DNS server in the master column for that domain instead of NULL. Ken On Thu, May 31, 2007 at 11:31:35AM +0200, Tim Timmermans wrote: > Hi, > > > > I've setup PDNS as slave. I have added two domains and configured them as > slave. They must re

Re: [Pdns-users] mysql timeout

2007-04-12 Thread Kenneth Marshall
Maik, You need to use a reasonable timeout, not 60 seconds which might work for a web app. Try the default 43200 (12h) or 86400 (24h) or more instead. Ken On Thu, Apr 12, 2007 at 10:50:28AM +0200, maik wrote: > hi, > anybody knows how to fix this problem? > > > pdns[19733]: Backend error: Fail

Re: [Pdns-users] 24 tickets were closed, new snapshot 998

2007-03-26 Thread Kenneth Marshall
On Sun, Mar 25, 2007 at 09:00:35PM +0200, bert hubert wrote: > Hi everybody, > > Heading up to 2.9.21, today saw the closing of 24 tickets. This is reflected > in snapshot 998, which is getting pretty close to release material. > > The list of closed tickets + tickets includes: > > * everything

Re: [Pdns-users] MySQL-Reconnecting with MySQL >5.0.3

2007-02-26 Thread Kenneth Marshall
On Mon, Feb 26, 2007 at 03:37:58PM -0700, Jason J. W. Williams wrote: > It would be nice to have a config file option to enable/disable it. In > our environment, there are no zone transfers going on, and its more > important to reconnect to maximize uptime. Also, PowerDNS should > handle rollbacks

Re: [Pdns-users] forward-zones with private address spaces

2007-02-05 Thread Kenneth Marshall
et that up? > > Best regards, > > Michael C. Gates > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of bert hubert > Sent: Monday, February 05, 2007 10:29 AM > To: Kenneth Marshall > Cc: pdns-users@mailman.powerdns.com

  1   2   >