[Opendnssec-user] problem with the auditor when upgrading from 1.1.1 to 1.2.1

[Mathieu Arnold]

Hi,

I have a mostly delegation zone (notaires.fr) with the following excerpt
(all that concerns paris.notaires.fr is in there) :

paris.notaires.fr.                            86400 IN MX       50
mta1a.mail.zscaler.net.
paris.notaires.fr.                            86400 IN MX       50
mta1b.mail.zscaler.net.
paris.notaires.fr.                            86400 IN MX       100
mta1c.mail.zscaler.net.
adl.paris.notaires.fr.                        86400 IN NS
ns0.coltfrance.com.
adl.paris.notaires.fr.                        86400 IN NS
ns1.coltfrance.com.
casagrande-labrousse.paris.notaires.fr.       86400 IN NS
ns1.lerelaisinternet.com.
casagrande-labrousse.paris.notaires.fr.       86400 IN NS
ns2.lerelaisinternet.com.
certif.paris.notaires.fr.                     86400 IN A
193.149.96.242
cridon.paris.notaires.fr.                     86400 IN A
193.149.97.197
eternis.paris.notaires.fr.                    86400 IN A
193.149.119.161
glm.paris.notaires.fr.                        86400 IN NS
ns2.domicile.fr.
glm.paris.notaires.fr.                        86400 IN NS
ns3.domicile.fr.
intranot.paris.notaires.fr.                   86400 IN A
212.121.182.58
ldap.paris.notaires.fr.                       86400 IN A
212.121.182.57
mail.paris.notaires.fr.                       86400 IN NS
ns1.francenet.fr.
mail.paris.notaires.fr.                       86400 IN NS
ns2.francenet.fr.
mail.paris.notaires.fr.                       86400 IN NS
ns3.francenet.fr.monassier-et-associes.paris.notaires.fr.      86400 IN NS
ns1.lsv.fr.
monassier-et-associes.paris.notaires.fr.      86400 IN NS
ns3.proximit.fr.
moreldarleux-duboys-hurel.paris.notaires.fr.  86400 IN NS       ns1.lsv.fr.
moreldarleux-duboys-hurel.paris.notaires.fr.  86400 IN NS
ns3.proximit.fr.
transfert.paris.notaires.fr.                  86400 IN A
193.149.97.194
urn.paris.notaires.fr.                        86400 IN A
193.149.97.194
www.paris.notaires.fr.                        86400 IN A
193.149.119.186


which is fine as far as I can tell. (It was generated through
named-compilezone.)

but the auditor seems to think otherwise :
$ /usr/local/bin/ods-auditor -z notaires.fr
Auditor started
Auditor starting on notaires.fr
6: SOA differs : from 1305712977 to 1305649900
6: Auditing notaires.fr zone : NSEC3 SIGNED
3: Glue should not be signed : eternis.paris.notaires.fr, A
3: Glue should not be signed : ldap.paris.notaires.fr, A
6: Finished auditing notaires.fr zone
Auditor found errors - check log for details
*** Error code 3

I don't really understand why it believes that those are glues (they are
not referenced anywhere else in the zone) and I don't really understand why
those two are the only ones considered bad as they are not the only A under
paris.notaires.fr.

Have I uncovered a bug, or is there something wrong I can't see ?

Regards,

-- 
Mathieu Arnold