rscalover

Well-Known Member
Dec 16, 2010
86
10
58
cPanel Access Level
Root Administrator
Hello,

I'm very skeptical about this i mean bind has worked for me for years (if it's not broken don't mess with it) however i want to enable dnssec and cPanel only supports that with powerdns .I am wondering if the switch is *really* as simple as choosing Powerdns in the "nameserver selection" interface in whm ? also i use AXFR transfers to secondary dns servers will that be broken ??
 

ffeingol

Well-Known Member
PartnerNOC
Nov 9, 2001
619
202
343
cPanel Access Level
DataCenter Provider
I can only answer the first part of your question, but the general answer is yes. PDNS is compatible with a whole bunch of 'back ends'. cPanel choose to implement it with a bind back end. So what basically happens is that bind gets shut down, PDNS gets started and it's configured to read the exact same zone files that bind was reading. All of the underlying cPanel "stuff" still thinks its using bind/wring bind zone files.
 

rscalover

Well-Known Member
Dec 16, 2010
86
10
58
cPanel Access Level
Root Administrator
Hello,

So i made the switch to powerdns as i was already exspecting it is not working .....

Code:
Dec  1 21:10:37 pdns_server: Not doing AXFR of an narrow zone 'domain.tld' for nameserver ip here
Dec  1 21:10:37 pdns_server: AXFR of domain 'domain.tld' denied to nameserver ip here
Also since i enabled dnssec i can't connect to my mailserver now what ?..... go back to bind i guess since it seems not to be so simple as cpanel says it is.


*edit*

The command found here Operational instructions — PowerDNS Authoritative Server documentation (pdnsutil unset-nsec3 ZONE) seems to have helped but i still don't get confirmation about working AXFR transfers
 
Last edited:

rscalover

Well-Known Member
Dec 16, 2010
86
10
58
cPanel Access Level
Root Administrator
Hello,

Glad i was stubborn and did not switch back to bind .Powerdns up and running ju]st fine now

Code:
Dec  2 13:25:57  pdns_server: AXFR of domain 'domain.tld' to nameserver_ip_here  finished
But can anybody tell me the trick with the bind-domain-extended-status command it does not work i have the cpanel-pdns-4.1.14-1.cp1186.x86_64 rpm package installed.
 

rscalover

Well-Known Member
Dec 16, 2010
86
10
58
cPanel Access Level
Root Administrator
@rscalover - can you get me more details about the command you're referring to and what issues you're seeing with it?
if you look here it says there is a command pdns_control bind-domain-extended-status domain here but i get the command doesn't exist however the docs say that command is new in PowerDns version 4.3.0 so i might have the wrong version.
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
6,163
785
313
cPanel Access Level
Root Administrator
Thanks for the clarification. I checked a version 92 server today and the RPM was 4.1, so it seems cPanel machines aren't using that version just yet:

Code:
# rpm -qa | grep pdns
cpanel-pdns-4.1.14-1.cp1186.x86_64
so you won't have that command available.