Using DLZ-LDAP with the dNSZone schema

Andreas Heinlein <[email protected]> Wed, 27 May 2009 12:10:11 +0200
Newsgroups gmane.network.dns.bind9.dlz
Message-ID <[email protected]>
Hello,

I am trying to find out if and how the DLZ LDAP driver can be used with
the dNSZone schema introduced with the SDB LDAP patch for BIND9. I am
sort of required to use that schema since the GOSa frontend
(www.gosa-project.org), which we heavily use, depends on it.

I still want to use the DLZ "way" now because Debian 5.0 has packaged
bind9 without the LDAP SDB patch, and I do not want to recompile if
necessary.

First of all I have no idea how to test the LDAP URLs I need to specify
in the config. Then I am wondering what the placeholders in the query
are replaced with. Is %record% replaced with the FQDN or just the
relative part? dNSZone uses relative Names, I have attached a few
example records.

Thank you,
Andreas

---

# extended LDIF
#
# LDAPv3
# base <dc=foo,dc=bar> (default) with scope subtree
# filter: (objectClass=dNSZone)
# requesting: ALL
#

# foo.bar., mail.foo.bar, servers, systems, foo.bar
dn: zoneName=foo.bar.,cn=mail.foo.bar,ou=servers,ou=systems,
 dc=foo,dc=bar
objectClass: top
objectClass: dNSZone
zoneName: foo.bar.
relativeDomainName: @
dNSClass: IN
sOARecord: 172.16.6.1 admin.mail.foo.bar. 200811113 10800 3600 604800
  38400
nSRecord: 172.16.6.1

# 6.16.172.in-addr.arpa, foo.bar., mail.foo.bar, servers, systems, foo.bar
dn: zoneName=6.16.172.in-addr.arpa,zoneName=foo.bar.,cn=mail.foo.bar,
 ou=servers,ou=systems,dc=foo,dc=bar
objectClass: top
objectClass: dNSZone
zoneName: 6.16.172.in-addr.arpa
relativeDomainName: @
dNSClass: IN
sOARecord: 172.16.6.1 admin.mail.foo.bar. 200811113 10800 3600 604800
  38400
nSRecord: 172.16.6.1

# mail, foo.bar., mail.foo.bar, servers, systems, foo.bar
dn: relativeDomainName=mail,zoneName=foo.bar.,cn=mail.foo.bar
 ,ou=servers,ou=systems,dc=foo,dc=bar
objectClass: top
objectClass: dNSZone
dNSTTL: 7440
dNSClass: IN
zoneName: foo.bar.
relativeDomainName: mail

# mail, mail, foo.bar., mail.foo.bar, servers, systems, foo.bar
dn: relativeDomainName=mail,relativeDomainName=mail,zoneName=foo.bar.
 ,cn=mail.foo.bar,ou=servers,ou=systems,dc=foo,dc=bar
objectClass: top
objectClass: dNSZone
dNSTTL: 7440
dNSClass: IN
zoneName: foo.bar.
relativeDomainName: mail
aRecord: 172.16.6.1

# 1, mail, foo.bar., mail.foo.bar, servers, systems, foo.
 bar
dn: relativeDomainName=1,relativeDomainName=mail,zoneName=foo.bar.,cn
 =mail.foo.bar,ou=servers,ou=systems,dc=foo,dc=bar
objectClass: top
objectClass: dNSZone
dNSTTL: 7440
dNSClass: IN
zoneName: 6.16.172.in-addr.arpa
relativeDomainName: 1
pTRRecord: mail.foo.bar.

------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT 
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, & 
iPhoneDevCamp as they present alongside digital heavyweights like Barbarian 
Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com