[Pdns-users] Powerdns with letsencrypt challenge

[Cheikh Dieng]

Hi,

I try to generate certificate via letsencrypt , to that i need to record
the following entry in my pdns server for letsencrypt challenge

_acme-challenge.cloud.lfpw.dsna.fr. 300 IN TXT "gfj9Xq...Rg85nM"

I'm using an ldapbackend with pdns in container mode.

How I can make this kind of input in dns server ?

1- When i try via pdnsutil tools , i receive that error message
*podman exec pdns pdnsutil add-record   cloud.lfpw.dsna.fr
<http://cloud.lfpw.dsna.fr>*  _acme-challenge  * TXT '"* gfj9Xq...Rg85nM
*"'*

Jun 08 19:57:56 [LdapBackend] LDAP servers = ldap://200.xx.xx.xx:1389/
Jun 08 19:57:56 [LdapBackend] Ldap connection succeeded
Jun 08 19:57:56 [LdapBackend] LDAP servers = ldap://200.xx.xx.xx:1389/
Jun 08 19:57:56 [LdapBackend] Ldap connection succeeded
Jun 08 19:57:56 [LdapBackend] Search = basedn:
dc=cloud,dc=lfpw,dc=dsna,dc=fr, filter: (&(associatedDomain= _acme-challenge
.cloud.lfpw.dsna.fr)(TXTRecord=*)), qtype: TXT
Jun 08 19:57:56 [LdapBackend] Search = basedn:
dc=cloud,dc=lfpw,dc=dsna,dc=fr, filter: (associatedDomain=_acme-challenge.
cloud.lfpw.dsna.fr),
 qtype: ANY

*backend did not accept the new RRset, aborting*
Jun 08 19:57:56 [LdapBackend] Ldap connection closed
Jun 08 19:57:56 [LdapBackend] Ldap connection closed

2- I try to do the record via my ldapserver with an ldif file

*This record is KO:*

dn: dc=_acme-challenge,dc=cloud,dc=lfpw,dc=dsna,dc=fr
objectclass: top
objectclass: dnsdomain
objectclass: dNSDomain2
objectclass: domainrelatedobject
dc: _acme-challenge
TXTRecord: "bzEja8EGD3dloAObjOgE2ZCNwPO4SUOrK3kmaVmJdMA"
associateddomain: *_acme-challenge.cloud.lfpw.dsna.fr
<http://acme-challenge.cloud.lfpw.dsna.fr>.*


  *This record is OK:  *

dn: dc=_acme-challenge,dc=cloud,dc=lfpw,dc=dsna,dc=fr
objectclass: top
objectclass: dnsdomain
objectclass: dNSDomain2
objectclass: domainrelatedobject
dc: _acme-challenge
TXTRecord: "bzEja8EGD3dloAObjOgE2ZCNwPO4SUOrK3kmaVmJdMA"
associateddomain: *_acme-challenge.cloud.lfpw.dsna.fr
<http://acme-challenge.cloud.lfpw.dsna.fr>*

The record for challenge must be:  *_acme-challenge.cloud.lfpw.dsna.fr
<http://acme-challenge.cloud.lfpw.dsna.fr>.* (with* .* at the end)

Thanks for your help !
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20210609/9488b3a4/attachment.htm>