You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Deleting a domain from the registry through the admin portal will fail if a domain has dnssec enabled with the error message Error deleting this Domain: This subdomain is being used as a hostname on another domain:. This originally appeared to be caused by the existence of DS records that point to the domain, preventing the domain from being deleted. However, some domains still got blocked from deletion even though they never had DNSSEC. To add to this bug, a few domains that never had dnssec were successfully deleted and we are unsure why it works for some and not others
Expected Behavior
Deleting a domain should work with or without it having dnssec or any other data. Deleting a domain from the registry through the admin portal deletes DS Data first, allowing for domains with DNSSec enabled to be successfully deleted. If deleting a DS record fails, then the error message displayed should accurately reflect that it is DS data, not a host, that is preventing the domain from being deleted. All other items connected to this domain should be deleted as well.
Note: there may also be something wrong with the way contacts are deleted.
Steps to Reproduce
In a test environment, enable DNSSec on a domain
Attempt to delete that domain from the registry in the admin portal
@h-m-f-t did note that a domain that couldn't be deleted last week by one of the analysts was able to be deleted today (and it didn't ever have DS data).
allly-b
changed the title
Domain Deletion Doesn't Handle DNSSecData
Domain Deletion fails for domains with and without DNSSEC
Jan 30, 2025
Current Behavior
Deleting a domain from the registry through the admin portal will fail if a domain has dnssec enabled with the error message
Error deleting this Domain: This subdomain is being used as a hostname on another domain:
. This originally appeared to be caused by the existence of DS records that point to the domain, preventing the domain from being deleted. However, some domains still got blocked from deletion even though they never had DNSSEC. To add to this bug, a few domains that never had dnssec were successfully deleted and we are unsure why it works for some and not othersExpected Behavior
Deleting a domain should work with or without it having dnssec or any other data. Deleting a domain from the registry through the admin portal deletes DS Data first, allowing for domains with DNSSec enabled to be successfully deleted. If deleting a DS record fails, then the error message displayed should accurately reflect that it is DS data, not a host, that is preventing the domain from being deleted. All other items connected to this domain should be deleted as well.
Note: there may also be something wrong with the way contacts are deleted.
Steps to Reproduce
Additional Context
Relevant slack thread
Issue Links
No response
The text was updated successfully, but these errors were encountered: