Visit Our UNIX and Linux User Community


bind9 with ldap using dlz

 
Thread Tools Search this Thread
Special Forums UNIX and Linux Applications bind9 with ldap using dlz
# 1  
Old 08-31-2009
bind9 with ldap using dlz

Hello guys, can anyone help me with the below error I'm getting from bind9? I'm trying to make bind read all the zone info from openldap, I have already created the schema and I've put some info into the ldap. I have also tried to google the error with no success.

I'm aware there is an problem using %zone% tags (the % is the problem) and I think there is a patch or something to put it as $zone$.

Is that problem related to this error? I'm asking because I'm unsure if this has already been fixed.

My OS in a Debian

cat /etc/debian_version
5.0.2



from /var/log/daemon.log

Code:
Aug 31 14:53:16 lab1 named[3215]: starting BIND 9.5.1-P3 -u bind
Aug 31 14:53:16 lab1 named[3215]: found 2 CPUs, using 2 worker threads
Aug 31 14:53:16 lab1 named[3215]: using up to 4096 sockets
Aug 31 14:53:16 lab1 named[3215]: loading configuration from '/etc/bind/named.conf'
Aug 31 14:53:16 lab1 named[3215]: max open files (1024) is smaller than max sockets (4096)
Aug 31 14:53:16 lab1 named[3215]: using default UDP/IPv4 port range: [1024, 65535]
Aug 31 14:53:16 lab1 named[3215]: using default UDP/IPv6 port range: [1024, 65535]
Aug 31 14:53:16 lab1 named[3215]: listening on IPv6 interfaces, port 53
Aug 31 14:53:16 lab1 named[3215]: listening on IPv4 interface lo, 127.0.0.1#53
Aug 31 14:53:16 lab1 named[3215]: listening on IPv4 interface eth0, 192.168.1.101#53
Aug 31 14:53:16 lab1 named[3215]: Loading 'ldap zone' using driver ldap
Aug 31 14:53:16 lab1 named[3215]: parsing allow zone transfer query failed
Aug 31 14:53:16 lab1 named[3215]: SDLZ driver failed to load.
Aug 31 14:53:16 lab1 named[3215]: DLZ driver failed to load.
Aug 31 14:53:16 lab1 named[3215]: loading configuration: failure
Aug 31 14:53:16 lab1 named[3215]: exiting (due to fatal error)



cat /etc/bind/named.conf.local

Code:
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
dlz "ldap zone" {
        database "ldap 2
        v3 simple {cn=admin,dc=domain,dc=com} {pass} {127.0.0.1}
        ldap:///DNSZoneName=_zone_,ou=dns,o=...tclass=DNSZone
        ldap:///DNSHostName=%record%,DNSZone...(!(DNSType=soa)))
        ldap:///DNSHostName=@,DNSZoneName=%z...d)(DNSType=soa))
        ldap:///DNSZoneName=%zone%,ou=dns,o=...(!(DNSType=soa)))
        ldap:///DNSZoneName=%zone%,ou=dns,o=...PAddr=%client%))";
};


Last edited by yered; 09-02-2009 at 02:46 PM..
# 2  
Old 09-04-2009
Well I tried to apply the $ path with no luck, it still does not work, does anyone knows if there is any official patch out there for that?

I followed this link
Gmane -- Mail To News And Back Again

I guess I will have to get happy with bind using mysql instead of ldap, I don't seem to find any clue about the issue with ldap... Smilie

Previous Thread | Next Thread
Test Your Knowledge in Computers #311
Difficulty: Easy
All program codes have to be compiled into an executable file in order to be run. This file can then be executed on any machine.
True or False?

9 More Discussions You Might Find Interesting

1. Solaris

LDAP Client not connecting to LDAP server

I have very limited knowledge on LDAP configuration and have been trying fix one issue, but unsuccessful. The server, I am working on, is Solaris-10 zone. sudoers is configured on LDAP (its not on local server). I have access to login directly on server with root, but somehow sudo is not working... (9 Replies)
Discussion started by: solaris_1977
9 Replies

2. IP Networking

Bind9 DNSSEC and rollerd

Hi all, I've a litte problem to get rollerd running and signing my zones if the ZSK of my zones are near expiring or expired. rollerd is running but do nothing startet with: /usr/bin/perl /usr/sbin/rollerd -rrfile /etc/bind/all.rollrec -directory /etc/bind -logfile /dev/stdout ... (1 Reply)
Discussion started by: xabbu
1 Replies

3. UNIX for Dummies Questions & Answers

BIND9 CNAME to External Domain

We're moving an app from a server in our domain to a server hosted by the vendor in their domain. This app had it's own domain setup that we're authoritative for. Do I need to create a new zone file? zone-vendor_com and set up the CNAME records in this file? Or if I can just edit the one I... (1 Reply)
Discussion started by: joeaverage
1 Replies

4. UNIX for Dummies Questions & Answers

Bind9 non existing ip , time of query

how can i set default permission for nslookup, i have in my nslookup timeout = 0 retry = 3 port = 53 but i want to set it to : timeout = 2 retry = 2 port = 53 i'm using bind9 , where can i set the default timeout for it? thanks in advance (0 Replies)
Discussion started by: prpkrk
0 Replies

5. Solaris

Bind9 DNS on Solaris 10 x4270 & CPU usage

I have configured a Bind9 DNS on a X4270 machine with Solaris10 I am excuting some repformance tests with DNSPERF tool and maximun CPU usage is 23%. I have seen with prstat -L -p PID that named process usses only 2 of the 8 available CPU at the same time although threads for all CPUs exist.... (2 Replies)
Discussion started by: parisph
2 Replies

6. UNIX for Advanced & Expert Users

Can I use bind9 to resolve only ONE hostname in a zone?

Hi there, I have the following problem. I have a Debian server with bind9. I can also use my ISP DNS server through the internet box (192.168.1.1). I would like to fool my client workstation to a local machine when they query for one specific hostname within a domain. I want to let the... (5 Replies)
Discussion started by: kokonut95
5 Replies

7. IP Networking

Conditional Forwarding using BIND9

Hello, I'm a noob when it comes to DNS and BIND9, so forgive me if my description seems pedantic: I connect to my workplace's network using VPN, which sets me up with the workplace DNS servers. Those servers manage the an internal namespace (visible only to users inside the VPN), with a... (5 Replies)
Discussion started by: neked
5 Replies

8. IP Networking

DNS upgrade issues, bind9.5.0_P1

so we had bind 9.3.0... we upgraded to 9.5.0 patch 1 we kept the exact same named.conf now we have a problem that some DMZ server cant do lookups from our DNS slave anymore. in the named.log we see things like this: 22-Jul-2008 16:05:04.694 security: info: client <our DMZ servers... (2 Replies)
Discussion started by: robsonde
2 Replies

9. Cybersecurity

Dns cache poisoning upgrade to bind9.5.0p2

Hi again guys, It seems this is a global thing affecting all the DNS bind versions prior to July 28 2008. I have my work cut out for me very soon, I see at least a handful of servers in my list that either need to patching or upgrading. How many of you guys are affected? Anybody successfully... (4 Replies)
Discussion started by: sparcguy
4 Replies

Featured Tech Videos