[Pdns-users] AXFR from pdns with ldap backend

Sergey Listopad psychosensor at gmail.com
Tue Aug 31 13:52:39 UTC 2010


Hi.

I has pdns installed on Centos5.5.

pdns-2.9.22-3.el5
pdns-backend-ldap-2.9.22-3.el5

I plan to use this installation as "shadow" master server, and
transfer zones to 2 or more slave servers.
But I have an issure with AXFR zone transfer. PDNS+LDAP returns 2 SOA
records whet I try AXFR. I try it with BIND dig and maradns fetchzone.
As described at
http://www.brandonhutchinson.com/multiple_RRs_of_singleon_type.html
BIND do not transfer zones with "multiple RRs of singleon type" error,
because AXFR returns 2 SOA records.

May be this is known issure. Or my PDNS+LDAP misconfigured. Can
anybody point me to right direction.

PDNS LDAP backend configured with ldap-method=tree.

ldap tree dns root is

dn: dc=internal,ou=dns,o=g
objectClass: dNSDomain
objectClass: domain
objectClass: top
objectClass: domainRelatedObject
associatedDomain: internal
dc: internal
nSRecord: ns.internal
nSRecord: ns2.internal
sOARecord: ns.internal root at noc.internal 1 1800 3600 86400 7200

under this root I have a couple of zones which i want to slave. For example:

dn: dc=testzone,dc=internal,ou=dns,o=g
objectClass: dNSDomain2
objectClass: dNSDomain
objectClass: domain
objectClass: top
objectClass: domainRelatedObject
associatedDomain: testzone.internal
dc: testzone
nSRecord: ns.internal
nSRecord: ns2.internal
sOARecord: ns.internal root at noc.internal 1 1800 3600 86400 7200

Then I try this:
$ dig @server testzone.internal axfr

; <<>> DiG 9.7.0-P1 <<>> @server testzone.internal axfr
; (1 server found)
;; global options: +cmd
testzone.internal.		3600	IN	SOA	ns.internal. root.noc.internal. 1 1800
3600 86400 7200
testzone.internal.		3600	IN	NS	ns.internal.
testzone.internal.		3600	IN	NS	ns2.internal.
host1.testzone.internal.	3600	IN	A	1.1.1.1
testzone.internal.		3600	IN	SOA	ns.internal. root.noc.internal. 1 1800
3600 86400 7200

and as you may see get 2 SOA records.


P.S. sorry for my terrible English

-- 
S.Listopad



More information about the Pdns-users mailing list