bind9+sdb-ldap provisioning issues
benjamin <[email protected]> Wed, 01 Jun 2005 14:45:07 +0900
| Newsgroups | gmane.comp.isp.ispman.user |
|---|---|
| Message-ID | <[email protected]> |
Hello all, This is my first post to the list. So I apologize ahead of time for any misinformed questions. First and foremost, I love this software. I can't wait to get it up. It must take a lot of effort to make software to get these disparate systems working together. I am putting together a system using ispman 1.2 and bind9+sdb-ldap. I have a DNS provisioning issue. The problem I have is this. In the example below, I have a dedicated ldapmaster and two dnsservers that also serve as ldapslaves. 1. A new domain gets added. 2. Ispman-master adds the info to ldapmaster. 3. Ispman-agent on dns01/ldapslave01 sees the new domain on ldapmaster and adds it to /etc/named.ispman.conf 4. Ispman-agent reloads named. ERROR: The new domains fail to load to lack of zone data 5. Ldapmaster replicates new zone data to dns01/ldapslave01 The problem here is timing between step 4 and 5 above. Possible solutions? 1. Use cron periodically reload named? Not a good solution as the number of names could get huge Also, what happens when a request to reload is sent and it is already reloading? 2. Change ldapslave01 to refer to ldapmaster for these cases? 3. I would like to use bind9+dlz instead but the schema is different and would require hacking of ispman or dlz. The main benefit of dlz is that named.conf is dynamic, so there is no reloading of named at all. Ultimately, I believe this is the only solutions for enterprise or real-time needs. http://bind-dlz.sourceforge.net/ Any comments or input would be appreciated, Ben ------------------------------------------------------- This SF.Net email is sponsored by Yahoo. Introducing Yahoo! Search Developer Network - Create apps using Yahoo! Search APIs Find out how you can build Yahoo! directly into your own Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005