[Pdns-users] State of the LDAP Backend

[Chris Hofstaedtler | Deduktiva]

Hi Karsten,

* Karsten Heymann <karsten.heymann at gmail.com> [181128 09:37]:
> https://doc.powerdns.com/md/authoritative/backend-ldap/ states:
> 
>  "As of PowerDNS Authoritative Server 4.0.0, the LDAP backend is fully
> supported."

Note that the link you posted is to an old copy of the
documentation. For 4.1, docs would be here:
https://doc.powerdns.com/authoritative/backends/index.html
https://doc.powerdns.com/authoritative/backends/ldap.html

> But I've set up a proof of concept server, imported a zone with
> zone2ldap and got mixed results:
> 
> * Querying the zone with dns works without problems
> * pdnsutil commands do not work consistently. Neither list-all-zones
> nor create-zone nor add-entry work, some with an error message, some
> failing silently. show-zone and list-zone seem to work. I could not
> find a list of features that are supposed to work with the ldap
> backend.

create-zone etc. rely on the Master/Slave featureset. These are not
supported by the LDAP backend.

> * What backends have write support for pdnsutil/the api? Only the sql backends?

Only gsql, really. Probably remote if you implement everything.
The bindbackend has some limitations that make some operations fail.

> It would be really helpful if the backend documentation would list the
> amount of api support as well, as it would make it easier to decide
> whether a backend has sufficient features.

Yeah. For now the answer is easy: if you want to use the API, use
one of the gsql backends.

Best,
Chris
-- 
Chris Hofstaedtler / Deduktiva GmbH (FN 418592 b, HG Wien)
www.deduktiva.com / +43 1 353 1707