Hi,

one of three authoritative name servers (ns3) which uses authoritative version 4.2.2 gives older serial number than the other two which use version 4.1.13.

MySQL sync is working properly and as far as I can see, databases are identical. Also executing pdns-util increase-serial on the main server did not correct the situation, the version 4.2.2 is still one step behind in serial.

All have default-soa-edit=INCEPTION-INCREMENT. The type if MASTER. I also tried to comment out default-soa-edit on ns3, but after that, the serial was two steps behind.

Is there a setting that can be used to fix this mismatch or is the only way to upgrade all to 4.2.2 level?

I have created a test zone on the servers. Here is some more information:

# dig +short -t soa testxyz @ns1.contrasec.fi
ns1.contrasec.fi. domain.contrasec.fi. 2020051405 10800 3600 604800 3600
# dig +short -t soa testxyz @ns3.contrasec.fi
ns1.contrasec.fi. domain.contrasec.fi. 2020051404 10800 3600 604800 3600


ns1:

# rpm -q pdns
pdns-4.1.13-1pdns.el7.x86_64

MariaDB [powerdns]> select * from domainmetadata where domain_id=265;
+-----+-----------+--------------+---------------------+
| id  | domain_id | kind         | content             |
+-----+-----------+--------------+---------------------+
| 835 |       265 | SOA-EDIT-API | INCEPTION-INCREMENT |
+-----+-----------+--------------+---------------------+
1 row in set (0.00 sec)

MariaDB [powerdns]> select * from records where domain_id=265;
+--------+-----------+---------+------+------------------------------------------------------------------------+-------+------+-------------+----------+-----------+------+
| id | domain_id | name | type | content | ttl | prio | change_date | disabled | ordername | auth |
+--------+-----------+---------+------+------------------------------------------------------------------------+-------+------+-------------+----------+-----------+------+
| 439369 | 265 | testxyz | CAA | 0 issue "letsencrypt.org" | 3600 | 0 | NULL | 0 | | 1 | | 439370 | 265 | testxyz | CAA | 0 issuewild "letsencrypt.org" | 3600 | 0 | NULL | 0 | | 1 | | 439371 | 265 | testxyz | NS | ns1.contrasec.fi | 86400 | 0 | NULL | 0 | | 1 | | 439372 | 265 | testxyz | NS | ns2.contrasec.fi | 86400 | 0 | NULL | 0 | | 1 | | 439373 | 265 | testxyz | NS | ns3.contrasec.fi | 86400 | 0 | NULL | 0 | | 1 | | 439374 | 265 | testxyz | TXT | "v=spf1 -all" | 3600 | 0 | NULL | 0 | | 1 | | 439375 | 265 | testxyz | SOA | ns1.contrasec.fi domain.contrasec.fi 2020051403 10800 3600 604800 3600 | 86400 | 0 | NULL | 0 | | 1 |
+--------+-----------+---------+------+------------------------------------------------------------------------+-------+------+-------------+----------+-----------+------+
7 rows in set (0.00 sec)



ns3:

# rpm -q pdns
pdns-4.2.2-1pdns.el8.x86_64

MariaDB [powerdns]>  select * from domainmetadata where domain_id=265;
+-----+-----------+--------------+---------------------+
| id  | domain_id | kind         | content             |
+-----+-----------+--------------+---------------------+
| 835 |       265 | SOA-EDIT-API | INCEPTION-INCREMENT |
+-----+-----------+--------------+---------------------+
1 row in set (0.001 sec)

MariaDB [powerdns]>  select * from records where domain_id=265;
+--------+-----------+---------+------+------------------------------------------------------------------------+-------+------+-------------+----------+-----------+------+
| id | domain_id | name | type | content | ttl | prio | change_date | disabled | ordername | auth |
+--------+-----------+---------+------+------------------------------------------------------------------------+-------+------+-------------+----------+-----------+------+
| 439369 | 265 | testxyz | CAA | 0 issue "letsencrypt.org" | 3600 | 0 | NULL | 0 | | 1 | | 439370 | 265 | testxyz | CAA | 0 issuewild "letsencrypt.org" | 3600 | 0 | NULL | 0 | | 1 | | 439371 | 265 | testxyz | NS | ns1.contrasec.fi | 86400 | 0 | NULL | 0 | | 1 | | 439372 | 265 | testxyz | NS | ns2.contrasec.fi | 86400 | 0 | NULL | 0 | | 1 | | 439373 | 265 | testxyz | NS | ns3.contrasec.fi | 86400 | 0 | NULL | 0 | | 1 | | 439374 | 265 | testxyz | TXT | "v=spf1 -all" | 3600 | 0 | NULL | 0 | | 1 | | 439375 | 265 | testxyz | SOA | ns1.contrasec.fi domain.contrasec.fi 2020051403 10800 3600 604800 3600 | 86400 | 0 | NULL | 0 | | 1 |
+--------+-----------+---------+------+------------------------------------------------------------------------+-------+------+-------------+----------+-----------+------+
7 rows in set (0.001 sec)


With best regards,

--
Cristian Seres
_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users

Reply via email to