>For Letsencrypt protocol to generate certificate I have to enable zone >transfer in my powerdns. I think you mean "DNS Updates" for Let's Encrypt dns-01, but I don't believe these are possible in PowerDNS with the LDAP backend. -JP