Re: BIND + LDAP ERROR - ReadList.com

2 msg	logging rndc commands
1 msg	Thinking about keeping latest bind releases, cv...

BIND + LDAP ERROR
\ Marcio Garcia (29 May 2007)
. \ Adam Tkac (29 May 2007)

4 msg	Question About SLAVE DNS and named.conf
2 msg	How to use rndc to get the list of zones
2 msg	Resolving confusion
2 msg	Re: Would like to change the default location o...
6 msg	multi CPU system 100% CPU useage
14 msg	split DNS?
5 msg	Strange domain issues - waterco.com.my
3 msg	Question About Boot.Zones
1 msg	fyi-- Re: dnscap V1.0-RC1
2 msg	newbie question
2 msg	Controlling the BIND cache (caching only author...
3 msg	Poisoned DNS?
2 msg	dig Query time
1 msg	Hooray, glue updates are instantaneous!
1 msg	dig blocks SIGINT,SIGTERM on Linux w/o threads
2 msg	use of allow-query-cache
2 msg	64-bit vs. 32 bit question

Subject:	Re: BIND + LDAP ERROR
Group:	Bind-users
From:	Adam Tkac
Date:	29 May 2007

Marcio Garcia napsal(a):
> Hi,
>
> I am trying to configure BIND + LDAP but I had some problems:
>
> My named daemon starts but occurs a error in my log file:
>
> Segue abaixo informações das entradas do LDAP, meu named.conf e os
> erros do daemon.log (loading zone: creating database: failure):
>
> # tail /var/log/daemon.log
>
> Aug 2 05:09:19 localhost named[3406]: zone 0.0.127.in-addr.arpa/IN:
> loaded serial 1997022700
> Aug 2 05:09:19 localhost named[3406]: zone exemplo.com.br/IN: loading
> zone: creating database: failure
> Aug 2 05:09:19 localhost named[3406]: zone localhost/IN: loaded
> serial 42
> Aug 2 05:09:19 localhost named[3406]: running
>
>
>
> 1- My Bind version: 9.4.1
>
>
> 2- My LDAP base:
>
> dn: dc=DNS,l=SP,c=BR
> objectClass: dcObject
> objectClass: locality
> l: SP
> dc: DNS
>
> dn: dc=Exemplo,dc=DNS,l=SP,c=BR
> objectClass: dcObject
> objectClass: locality
> l: SP
> dc: Exemplo
>
> dn: relativeDomainName=@,dc=Exemplo,dc=DNS,l=SP,c=BR
> objectClass: dNSZone
> relativeDomainName: @
> zoneName: exemplo.com.br.
> dNSTTL: 3600
> dNSClass: IN
> sOARecord: exemplo.com.br. hostmaster.exemplo.com.br. 2004080100 3600
> 1800 604800 86400
> nSRecord: exemplo.com.br.
>
> dn: relativeDomainName=server,dc=exemplo,dc=DNS,l=SP,c=BR
> objectClass: dNSZone
> relativeDomainName: server
> zoneName: exemplo.com.br.
> dNSTTL: 86400
> dNSClass: IN
> aRecord: 192.168.200.1
>
> dn: relativeDomainName=www,dc=exemplo,dc=DNS,l=SP,c=BR
> objectClass: dNSZone
> relativeDomainName: www
> zoneName: exemplo.com.br.
> dNSTTL: 86400
> dNSClass: IN
> aRecord: 192.168.200.1
>
> dn: relativeDomainName=mail,dc=exemplo,dc=DNS,l=SP,c=BR
> objectClass: dNSZone
> relativeDomainName: mail
> zoneName: exemplo.com.br.
> dNSTTL: 86400
> dNSClass: IN
> aRecord: 192.168.200.1
> mXRecord: 5 mail.exemplo.com.br.
>
>
> 3- My named.conf
>
> options {
> directory "/var/named";
> allow-transfer { 192.168.200.1; 192.168.200.23; };
> };
>
> zone "." IN {
> type hint;
> file "named.ca";
> };
>
> zone "localhost" IN {
> type master;
> file "localhost.zone";
> allow-update { none; };
> };
>
> zone "0.0.127.in-addr.arpa" IN {
> type master;
> file "named.local";
> allow-update { none; };
> };
>
> zone "exemplo.com.br" IN {
> type master;
> database "ldap ldap://127.0.0.1/dc=exemplo,dc=DNS,l=SP,c=BR";
> };
>
>
>
> Bye,
>
>
> Marcio Garcia
>
>
>
Did you compiled your bind yourself? How did you do it? Because it isn't
easy compile bind with ldap backend. You could find help in
bind/contrib/sdb/ldap/INSTALL.ldap or on
http://www.venaas.no/ldap/bind-sdb/ . Also make sure if you're using
openldap with deprecated API (see if LDAP_API_VERSION macro in ldap.h >=
3001) than you're compiling bind with -DLDAP_DEPRECATED. Or you could
try Red Hat's bind (http://people.redhat.com/atkac/bind/) which has this
feature implemented :)

Regards, Adam

Regards, Adam