[Pkg-pdns-maintainers] Bug#698911: pdns-backend-pgsql: Default schema for pdns-backend-pgsql needs update

[James Cloos]

Package: pdns-backend-pgsql
Version: 3.1-4
Severity: grave
Justification: renders package unusable

Dear Maintainer,

Debian’s default schema for pdns-backend-pgsql specifies that the records.content
column be varchar(255).

That is insufficient for some records, such as RRSIG RRs used with dnssec.

Upstream has updated to varchar(65535), although text also would be find.

When using deb’s version of pdns as an axfr slave nameserver, pdns will be
unable to save the zones which have been dnssec-signed by the master server
into the records table, blocking operation for such zones completely.

(pdns tries to save the AXFR data in a SQL TRANSACTION; because the RRSIG
and other longer records fail to fit in the varchar(255), the transaction
fails and pgsql does a ROLLBACK instead when pdns issues its COMMIT.)

Simply ALTERing the records table to set the TYPE of contents to text or to
varchar(65535) makes everything just work.

It is likely that this bug also applies to the related pdns-backend-mysql
and pdns-backend-sqlite packages, but I have not confirmed so.

The fix for new installs is a simple one-line change to the default schema as
described above.  Existing installs which choose automatic maintainance of the
pdns db, though, should be updated by way of an:

   ALTER TABLE records ALTER COLUMN content TYPE VARCHAR(65535);

(translated as necessary for the other backends, if they indeed also have this bug.)

*** Please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
     ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these lines ***


-- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages pdns-backend-pgsql depends on:
ii  dbconfig-common        1.8.47+nmu1
ii  debconf [debconf-2.0]  1.5.49
ii  libc6                  2.13-38
ii  libgcc1                1:4.7.2-5
ii  libpolarssl0           1.1.4-1
ii  libpq5                 9.1.7-1
ii  libssl1.0.0            1.0.1c-4
ii  libstdc++6             4.7.2-5
ii  pdns-server            3.1-4
ii  zlib1g                 1:1.2.7.dfsg-13

Versions of packages pdns-backend-pgsql recommends:
ii  postgresql-client-9.1 [postgresql-client]  9.1.7-1

Versions of packages pdns-backend-pgsql suggests:
pn  postgresql  <none>

-- debconf information excluded