Re: Bind-9.4.2 DLZ LDAP
Rob Butler <[email protected]>
| Newsgroups | gmane.network.dns.bind9.dlz |
|---|---|
| Message-ID | <[email protected]> |
OK, the problem is the LDAP client (not DLZ, but the LDAP API's) evolved and don't like '%zone%' and '%client%' anymore. The '%' symbol is used to escape characters in URL's. There is a patch around that replaces all uses of '%' as delimiters with '$' so the LDAP API will work without complaint. Find that patch, apply it, compile and change all '%' to '$' in your config and everything should work fine. Rob ----- Original Message ---- From: mirghany <[email protected]> To: [email protected] Sent: Sunday, May 4, 2008 3:03:15 AM Subject: Re: [Bind-dlz-testers] Bind-9.4.2 DLZ LDAP Rob Butler wrote: your LDAP query isn't correct for the lookup query. Post the DLZ section of your named.conf so we can help find the error. Rob ----- Original Message ---- From: mirghany <[email protected]> To: [email protected] Sent: Wednesday, April 30, 2008 8:55:01 AM Subject: [Bind-dlz-testers] Bind-9.4.2 DLZ LDAP Dear , I tried to test bind-9.4.2 with DLZ and LDAP. I recompile bind with DLZ LDAP option. LDAP ...> OpenLDAP: slapd 2.3.27 and follow the example on http://bind-dlz.sourceforge.net/ldap_example.html LDAP seems to be up and running also ldapsearch ok. when I tried to start bind with named -c /etc/named.conf -d 20 -u named -g I've got these logs: [root@bindldap ~]# named -c /etc/named.conf -d 20 -u named -g 30-Apr-2008 09:28:03.835 starting BIND 9.4.2 -c /etc/named.conf -d 20 -u named -g 30-Apr-2008 09:28:03.836 found 1 CPU, using 1 worker thread 30-Apr-2008 09:28:03.836 Registering DLZ ldap driver. 30-Apr-2008 09:28:03.837 Registering SDLZ driver 'ldap' 30-Apr-2008 09:28:03.837 Registering DLZ driver 'ldap' 30-Apr-2008 09:28:03.843 loading configuration from '/etc/named.conf' 30-Apr-2008 09:28:03.845 set maximum stack size to 4294967295: success 30-Apr-2008 09:28:03.845 set maximum data size to 4294967295: success 30-Apr-2008 09:28:03.845 set maximum core size to 4294967295: success 30-Apr-2008 09:28:03.845 set maximum open files to 1024: success 30-Apr-2008 09:28:03.846 listening on IPv4 interface lo, 127.0.0.1#53 30-Apr-2008 09:28:03.846 clientmgr @0xb7f7e008: create 30-Apr-2008 09:28:03.848 socket 0xb7f7eec8: created 30-Apr-2008 09:28:03.849 clientmgr @0xb7f7e008: createclients 30-Apr-2008 09:28:03.849 clientmgr @0xb7f7e008: create new 30-Apr-2008 09:28:03.850 client @0xb6113008: create 30-Apr-2008 09:28:03.851 socket 0xb7f80008: created 30-Apr-2008 09:28:03.851 clientmgr @0xb7f7e008: createclients 30-Apr-2008 09:28:03.851 clientmgr @0xb7f7e008: create new 30-Apr-2008 09:28:03.852 client @0xb60d2008: create 30-Apr-2008 09:28:03.853 listening on IPv4 interface eth0, 212.103.160.190#53 30-Apr-2008 09:28:03.853 clientmgr @0xb7f7e1e0: create 30-Apr-2008 09:28:03.853 socket 0xb7f80148: created 30-Apr-2008 09:28:03.854 clientmgr @0xb7f7e1e0: createclients 30-Apr-2008 09:28:03.854 clientmgr @0xb7f7e1e0: create new 30-Apr-2008 09:28:03.855 client @0xb6091008: create 30-Apr-2008 09:28:03.855 socket 0xb7f80288: created 30-Apr-2008 09:28:03.856 clientmgr @0xb7f7e1e0: createclients 30-Apr-2008 09:28:03.856 clientmgr @0xb7f7e1e0: create new 30-Apr-2008 09:28:03.857 client @0xb6050008: create 30-Apr-2008 09:28:03.860 Loading 'ldap zone' using driver ldap 30-Apr-2008 09:28:03.861 Loading SDLZ driver. 30-Apr-2008 09:28:03.861 LDAP driver running multithreaded 30-Apr-2008 09:28:03.861 lookup query must specify a search base 30-Apr-2008 09:28:03.861 SDLZ driver failed to load. 30-Apr-2008 09:28:03.862 DLZ driver failed to load. 30-Apr-2008 09:28:03.862 calling free_rbtdb(.) 30-Apr-2008 09:28:03.862 done free_rbtdb(.) 30-Apr-2008 09:28:03.863 load_configuration: failure 30-Apr-2008 09:28:03.863 loading configuration: failure 30-Apr-2008 09:28:03.863 exiting (due to fatal error) Any one have an Idea about that error in RED. Also note when I tcpdump I could not find any trial from bind to communicate with LDAP even local server or another remote one. otherwise ldapsearch did. Thanks -- Ahmed El-Mirghany Senior Systems Engineer RHCE,LPI T. E. Data Mobile +2(010)1608655 E-Mail: [email protected] ________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. ________________________________ ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ________________________________ _______________________________________________ Bind-dlz-testers mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/bind-dlz-testers Dear , Here are kindly find named.conf LDAP section. dlz "ldap zone" { database "ldap 1 v3 simple {cn=mirghany,o=bind-dlz} {mirghany} {127.0.0.1} ldap:///dlzZoneName=%zone%,ou=dns,o=bind-dlz???objectclass=dlzZone ldap:///dlzHostName=%record%,dlzZoneName=%zone%,ou=dns,o=bind-dlz?dlzTTL,dlzType,dlzPreference,dlzData,dlzIPAddr,dlzPrimaryNS,dlzAdminEmail,dlzSerial,dlzRefresh,dlzRetry,dlzExpire,dlzMinimum?sub?objectclass=dlzAbstractRecord"; }; Also the normal LDAP search result: Command : ldapsearch -x -h 127.0.0.1 -D"cn=mirghany,o=bind-dlz" -w mirghany -b"o=bind-dlz" Result: # extended LDIF # # LDAPv3 # base <o=bind-dlz> with scope subtree # filter: (objectclass=*) # requesting: ALL # # bind-dlz dn: o=bind-dlz objectClass: organization o: bind-dlz # dns, bind-dlz dn: ou=dns,o=bind-dlz objectClass: organizationalUnit ou: dns # example.com, dns, bind-dlz dn: dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzZone dlzZoneName: example.com # @, example.com, dns, bind-dlz dn: dlzHostName=@,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzHost dlzHostName: @ # www, example.com, dns, bind-dlz dn: dlzHostName=www,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzHost dlzHostName: www # mail, example.com, dns, bind-dlz dn: dlzHostName=mail,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzHost dlzHostName: mail # backup, example.com, dns, bind-dlz dn: dlzHostName=backup,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzHost dlzHostName: backup # ns1, example.com, dns, bind-dlz dn: dlzHostName=ns1,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzHost dlzHostName: ns1 # ns2, example.com, dns, bind-dlz dn: dlzHostName=ns2,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzHost dlzHostName: ns2 # ~, example.com, dns, bind-dlz dn: dlzHostName=~,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzHost dlzHostName: ~ # 1, @, example.com, dns, bind-dlz dn: dlzRecordID=1,dlzHostName=@,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzGenericRecord dlzRecordID: 1 dlzHostName: @ dlzType: txt dlzData: "this is a text record" dlzTTL: 10 # 2, www, example.com, dns, bind-dlz dn: dlzRecordID=2,dlzHostName=www,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzARecord dlzRecordID: 2 dlzHostName: www dlzType: a dlzIPAddr: 192.168.0.1 dlzTTL: 10 # 3, mail, example.com, dns, bind-dlz dn: dlzRecordID=3,dlzHostName=mail,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzARecord dlzRecordID: 3 dlzHostName: mail dlzType: a dlzIPAddr: 192.168.0.2 dlzTTL: 10 # 4, backup, example.com, dns, bind-dlz dn: dlzRecordID=4,dlzHostName=backup,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzARecord dlzRecordID: 4 dlzHostName: backup dlzType: a dlzIPAddr: 192.168.0.3 dlzTTL: 10 # 5, @, example.com, dns, bind-dlz dn: dlzRecordID=5,dlzHostName=@,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzMXRecord dlzRecordID: 5 dlzHostName: @ dlzType: mx dlzData: mail dlzPreference: 20 dlzTTL: 10 # 6, @, example.com, dns, bind-dlz dn: dlzRecordID=6,dlzHostName=@,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzMXRecord dlzRecordID: 6 dlzHostName: @ dlzType: mx dlzData: backup dlzPreference: 40 dlzTTL: 10 # 7, www, example.com, dns, bind-dlz dn: dlzRecordID=7,dlzHostName=www,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzMXRecord dlzRecordID: 7 dlzHostName: www dlzType: mx dlzData: backup dlzPreference: 40 dlzTTL: 10 # 8, www, example.com, dns, bind-dlz dn: dlzRecordID=8,dlzHostName=www,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzMXRecord dlzRecordID: 8 dlzHostName: www dlzType: mx dlzData: mail dlzPreference: 20 dlzTTL: 10 # 9, ns1, example.com, dns, bind-dlz dn: dlzRecordID=9,dlzHostName=ns1,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzARecord dlzRecordID: 9 dlzHostName: ns1 dlzType: a dlzIPAddr: 192.168.0.4 dlzTTL: 10 # 10, ns2, example.com, dns, bind-dlz dn: dlzRecordID=10,dlzHostName=ns2,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzARecord dlzRecordID: 10 dlzHostName: ns2 dlzType: a dlzIPAddr: 192.168.0.5 dlzTTL: 10 # 11, @, example.com, dns, bind-dlz dn: dlzRecordID=11,dlzHostName=@,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzSOARecord dlzRecordID: 11 dlzHostName: @ dlzType: soa dlzSerial: 2 dlzRefresh: 2800 dlzRetry: 7200 dlzExpire: 604800 dlzMinimum: 86400 dlzAdminEmail: root.example.com. dlzPrimaryNS: ns1.example.com. dlzTTL: 10 # 12, @, example.com, dns, bind-dlz dn: dlzRecordID=12,dlzHostName=@,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzNSRecord dlzRecordID: 12 dlzHostName: @ dlzType: ns dlzData: ns1.example.com. dlzTTL: 10 # 13, @, example.com, dns, bind-dlz dn: dlzRecordID=13,dlzHostName=@,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzNSRecord dlzRecordID: 13 dlzHostName: @ dlzType: ns dlzData: ns2 dlzTTL: 10 # 14, ~, example.com, dns, bind-dlz dn: dlzRecordID=14,dlzHostName=~,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzARecord dlzRecordID: 14 dlzHostName: ~ dlzType: a dlzIPAddr: 192.168.0.250 dlzTTL: 10 # 15, example.com, dns, bind-dlz dn: dlzRecordID=15,dlzZoneName=example.com,ou=dns,o=bind-dlz objectClass: dlzXFR dlzRecordID: 15 dlzIPAddr: 127.0.0.1 # search result search: 2 result: 0 Success # numResponses: 26 # numEntries: 25 BR -- Ahmed El-Mirghany Senior Systems Engineer RHCE,LPI T. E. Data Mobile +2(010)1608655 E-Mail: [email protected] ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ Bind-dlz-testers mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/bind-dlz-testers