[Pdns-users] ldapbackend: zone transfers and ldap-disable-ptrrecord

[Norbert Sendetzky]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all

Bad news for all who need zone transfers (AXFR) to other name servers 
and wanted to use ldap-disable-ptrrecord=yes for conveniance:

You have to add PTR records (e.g. 1.1.10.10.in-addr.arpa) to your ldap 
tree and set ldap-disable-ptrrecord=no, because it isn't possible to 
generate a correct list of PTR records from your A or AAAA records.

This is due to a restriction of the ldap A and AAAA attributes, which 
doesn't allow substring matches. This prevents searching of 
substrings in the attribute values and makes it almost impossible to 
implement a satisfying solution.


Norbert

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAj+c858ACgkQxMLs5v5/7eBZAwCfbL7s+ixlIyUKVu87Nm7+gswY
3agAmwZEUS1yDJQjLw5XfCMcZg2xfcUH
=QSw+
-----END PGP SIGNATURE-----