Re: Using DLZ-LDAP with the dNSZone schema

%record% is the record name relative to the zone (%zone% token).

You can test LDAP queries using curl if you have the OpenLDAP libraries installed.  See this page for more info (http://www.cs.sunysb.edu/documentation/curl/index.html) and search for the word 'LDAP'.

Simply format your LDAP query to return the data as described here (http://bind-dlz.sourceforge.net/ldap_driver.html).

FYI - I don't know if you'll be able to avoid recompiling bind.  DLZ's core is part of BIND 9, but the various drivers are still in the contrib section of BIND.  Most distributions don't build their releases with 'contrib' stuff enabled.  You'll need the LDAP driver from the contrib section for DLZ to use LDAP.

Rob



----- Original Message ----
> From: Andreas Heinlein <[email protected]>
> To: [email protected]
> Sent: Wednesday, May 27, 2009 6:10:11 AM
> Subject: [Bind-dlz-testers] Using DLZ-LDAP with the dNSZone schema
> 
> Hello,
> 
> I am trying to find out if and how the DLZ LDAP driver can be used with
> the dNSZone schema introduced with the SDB LDAP patch for BIND9. I am
> sort of required to use that schema since the GOSa frontend
> (www.gosa-project.org), which we heavily use, depends on it.
> 
> I still want to use the DLZ "way" now because Debian 5.0 has packaged
> bind9 without the LDAP SDB patch, and I do not want to recompile if
> necessary.
> 
> First of all I have no idea how to test the LDAP URLs I need to specify
> in the config. Then I am wondering what the placeholders in the query
> are replaced with. Is %record% replaced with the FQDN or just the
> relative part? dNSZone uses relative Names, I have attached a few
> example records.
> 
> Thank you,
> Andreas
> 
> ---
> 
> # extended LDIF
> #
> # LDAPv3
> # base (default) with scope subtree
> # filter: (objectClass=dNSZone)
> # requesting: ALL
> #
> 
> # foo.bar., mail.foo.bar, servers, systems, foo.bar
> dn: zoneName=foo.bar.,cn=mail.foo.bar,ou=servers,ou=systems,
> dc=foo,dc=bar
> objectClass: top
> objectClass: dNSZone
> zoneName: foo.bar.
> relativeDomainName: @
> dNSClass: IN
> sOARecord: 172.16.6.1 admin.mail.foo.bar. 200811113 10800 3600 604800
>   38400
> nSRecord: 172.16.6.1
> 
> # 6.16.172.in-addr.arpa, foo.bar., mail.foo.bar, servers, systems, foo.bar
> dn: zoneName=6.16.172.in-addr.arpa,zoneName=foo.bar.,cn=mail.foo.bar,
> ou=servers,ou=systems,dc=foo,dc=bar
> objectClass: top
> objectClass: dNSZone
> zoneName: 6.16.172.in-addr.arpa
> relativeDomainName: @
> dNSClass: IN
> sOARecord: 172.16.6.1 admin.mail.foo.bar. 200811113 10800 3600 604800
>   38400
> nSRecord: 172.16.6.1
> 
> # mail, foo.bar., mail.foo.bar, servers, systems, foo.bar
> dn: relativeDomainName=mail,zoneName=foo.bar.,cn=mail.foo.bar
> ,ou=servers,ou=systems,dc=foo,dc=bar
> objectClass: top
> objectClass: dNSZone
> dNSTTL: 7440
> dNSClass: IN
> zoneName: foo.bar.
> relativeDomainName: mail
> 
> # mail, mail, foo.bar., mail.foo.bar, servers, systems, foo.bar
> dn: relativeDomainName=mail,relativeDomainName=mail,zoneName=foo.bar.
> ,cn=mail.foo.bar,ou=servers,ou=systems,dc=foo,dc=bar
> objectClass: top
> objectClass: dNSZone
> dNSTTL: 7440
> dNSClass: IN
> zoneName: foo.bar.
> relativeDomainName: mail
> aRecord: 172.16.6.1
> 
> # 1, mail, foo.bar., mail.foo.bar, servers, systems, foo.
> bar
> dn: relativeDomainName=1,relativeDomainName=mail,zoneName=foo.bar.,cn
> =mail.foo.bar,ou=servers,ou=systems,dc=foo,dc=bar
> objectClass: top
> objectClass: dNSZone
> dNSTTL: 7440
> dNSClass: IN
> zoneName: 6.16.172.in-addr.arpa
> relativeDomainName: 1
> pTRRecord: mail.foo.bar.
> 
> ------------------------------------------------------------------------------
> Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT 
> is a gathering of tech-side developers & brand creativity professionals. Meet
> the minds behind Google Creative Lab, Visual Complexity, Processing, & 
> iPhoneDevCamp as they present alongside digital heavyweights like Barbarian 
> Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com 
> _______________________________________________
> Bind-dlz-testers mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/bind-dlz-testers



      

------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT 
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, & 
iPhoneDevCamp as they present alongside digital heavyweights like Barbarian 
Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com