[Pdns-users] State of the LDAP Backend

[Karsten Heymann]

Hi,

we are currently evaluating if using the LDAP backend with pdns 4.1
would be a viable solution for our authoritative dns servers (using
native mode). The reason we would it prefer ldap to a sql based
solution is that we have more operative experience with ldap
replication than we have with mysql/mariadb replication. We want to
use the powerdns api and a api web frontend (probably
https://github.com/operasoftware/dns-ui).

https://doc.powerdns.com/md/authoritative/backend-ldap/ states:

 "As of PowerDNS Authoritative Server 4.0.0, the LDAP backend is fully
supported."

But I've set up a proof of concept server, imported a zone with
zone2ldap and got mixed results:

* Querying the zone with dns works without problems
* pdnsutil commands do not work consistently. Neither list-all-zones
nor create-zone nor add-entry work, some with an error message, some
failing silently. show-zone and list-zone seem to work. I could not
find a list of features that are supposed to work with the ldap
backend.
* What backends have write support for pdnsutil/the api? Only the sql backends?

It would be really helpful if the backend documentation would list the
amount of api support as well, as it would make it easier to decide
whether a backend has sufficient features.

Best regards,
Karsten