Re: Dynamic updates with DLZ

Martin Nagy <[email protected]> Fri, 12 Sep 2008 17:02:30 +0200
Newsgroups gmane.network.dns.bind9.dlz
Organization Red Hat
Message-ID <[email protected]>
Hi Rob,
this really surprises me. I only took a brief look at the code, but
still, I thought that it would suffice to implement some of the
functions that currently aren't implemented in sdlz.c. Or doesn't the DB
API itself support updates? What am I missing here?
Your insight would be much appreciated. Thanks!

Regards,
Martin

On Fri, 12 Sep 2008 05:35:28 -0700 (PDT), Rob Butler
<[email protected]> wrote:
> Hi Martin,
> 
> I would welcome a patch to incorporate dynamic update capabilities
> into DLZ.  Its something I've wanted to do for a while, but been much
> too busy to get around to.  Unfortunately, it is a LOT of work
> because of how BIND is internally architected.  It's not impossible
> to do, but its more work than I felt like taking on.  In fact, I feel
> it would be less work to build an entirely new DNS server that was
> designed for such capabilities from the outset VS adding it to BIND.
> 
> I don't know if the ISC would accept your patch into BIND.  You would
> have to contact them directly, but at least your patch could find a
> home with DLZ.
> 
> To get started take a look at the DLZ API & the SDLZ API that are
> within the DLZ patch.  They will help you get familiar with the BIND
> DB API which is what you'll have to build to.
> 
> Rob (DLZ creator)
> 
> 
> 
> ----- Original Message ----
> > From: Martin Nagy <[email protected]>
> > To: [email protected]
> > Sent: Thursday, September 11, 2008 8:09:00 PM
> > Subject: [Bind-dlz-testers] Dynamic updates with DLZ
> > 
> > Hi,
> > I'd like to use DLZ with dynamic updates. This would mean that a DLZ
> > backend could optionally have a function to handle the updates and
> > write it back to the database. The reason I want this is that I'd
> > like to have BIND with LDAP backend. Then, I'd like the updates to
> > be made with GSS-TSIG. This could be done by hosts themselves, BIND
> > already supports GSS-TSIG and it is possible to configure it to,
> > for example, allow a machine to only update it's own record (by
> > looking at the kerberos principal). This is why I'd like this
> > feature.
> > 
> > Would it be possible to implement this? I'd even be willing to make
> > a patch, I'd just like to know if the patch could then be accepted.
> > Also, some hints as to where to start looking at the code would be
> > much appreciated.
> > 
> > On a related note, would it be possible to patch BIND in such a way
> > that it could dynamically load DLZ backends using dlopen()? Again, I
> > guess this is more of a "would it get accepted?" question.
> > 
> > Also, am I contacting the right guys? Or should I ask on some
> > official BIND mailing list? I'm not sure what's the relation
> > between the DLZ developer(s) and BIND developers, since the DLZ
> > code is already included in BIND codebase.
> > 
> > I'll be grateful for any help! Thanks.
> > 
> > Regards,
> > Martin Nagy

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/