PowerDNS LDAP Backend/Installation - Revision history

Nose: removed backlink

2008-06-22T12:40:35Z

removed backlink

Nose: /* Configuration options */

2008-02-16T17:40:37Z

‎Configuration options

Nose: PowerDNS LDAP Backend - Installation moved to PowerDNS LDAP Backend/Installation

2007-05-17T14:49:56Z

PowerDNS LDAP Backend - Installation moved to PowerDNS LDAP Backend/Installation

Nose: header hierarchy

2007-05-06T17:05:27Z

header hierarchy

Nose: LDAP DNS

2007-04-21T20:51:15Z

LDAP DNS

Nose: Pdnsldap installation moved to PowerDNS LDAP Backend - Installation

2007-04-15T10:47:38Z

Pdnsldap installation moved to PowerDNS LDAP Backend - Installation

Nose: /* Configuration options */

2006-09-23T19:38:23Z

‎Configuration options

Nose: /* Configuration options */

2006-05-01T12:11:19Z

‎Configuration options

Nose: /* Configuration options */

2006-05-01T11:38:46Z

‎Configuration options

NicFerrier: add launch statement to pdns.conf file

2006-04-29T22:14:11Z

add launch statement to pdns.conf file

← Older revision		Revision as of 12:40, 22 June 2008
Line 52:		Line 52:

	; ldap-filter-lookup (default <nowiki>"(:target:)"</nowiki> ) : LDAP filter for limiting IP or name lookups, e.g. (&(:target:)(active=yes)) for returning only entries whose attribute "active" is set to "yes".		; ldap-filter-lookup (default <nowiki>"(:target:)"</nowiki> ) : LDAP filter for limiting IP or name lookups, e.g. (&(:target:)(active=yes)) for returning only entries whose attribute "active" is set to "yes".
−
−
−	~~----~~
−	~~Back to [[PowerDNS LDAP Backend\|Overview]]~~

@@ Line 28: / Line 28: @@
 You'll have to add the LDAP DNS backend to the PowerDNS backends first by altering the launch declaration in the pdns.conf file. Otherwise the options below won't have any effect.
-; ldap-host (default <nowiki>"127.0.0.1:389"</nowiki>) : Host name or ip address and optionally the port of the LDAP server. For SSL encrypted connections you must assign a LDAP URI (like "ldaps://127.0.0.1:389") as ldap-host. There can be multiple server specified for load balancing and high availability if they are separated by spaces.
+; ldap-host (default <nowiki>"ldap://127.0.0.1:389/"</nowiki>) : The values assigned to this parameter can be LDAP URIs (e.g. ldap://127.0.0.1/ or ldaps://127.0.0.1/) describing the connection to the LDAP server. There can be multiple LDAP URIs specified for load balancing and high availability if they are separated by spaces. In case the used LDAP client library doesn't support LDAP URIs as connection parameter, use plain host names or IP addresses instead (both may optionally be followed by a colon and the port).
-; ldap-starttls (default "no") : Use TLS encrypted connections to the LDAP server
+; ldap-starttls (default "no") : Use TLS encrypted connections to the LDAP server. This is only allowed if ldap-host is a ldap:// URI or a host name / IP address.
 ; ldap-basedn (default "") : The PowerDNS LDAP DNS backend searches below this path for objects containing the specified DNS information. The retrieval of attributes is limited to this subtree. This option must be set to the path according to the layout of your LDAP tree, e.g. ou=hosts,o=linuxnetworks,c=de is the DN to my objects containing the DNS information.

← Older revision		Revision as of 17:05, 6 May 2007
Line 1:		Line 1:
	__TOC__		__TOC__
−
−	~~= Installation =~~

	== Compilation ==		== Compilation ==

@@ Line 5: / Line 5: @@
 == Compilation ==
-Before performing the steps to compile the PowerDNS server and the LDAP backend you have to install a ldap development package, which includes all necessary headers. The openldap-devel package is provided by most distributions. Apply these steps to the source .tar.gz file, if you don't want to use a precompiled package:
+Before performing the steps to compile the PowerDNS server and the LDAP DNS backend you have to install a LDAP development package, which includes all necessary headers. The openldap-devel package is provided by most distributions. Apply these steps to the source .tar.gz file, if you don't want to use a pre-compiled package:
   * Extract the tar file
@@ Line 24: / Line 24: @@
 == Configuration options ==
-There are a few options through the LDAP backend can be configured for your environment. Add them to the pdns.conf file located in /etc/powerdns or /usr/local/etc/ (depends on your configuration while compiling):
+There are a few options through the LDAP DNS backend can be configured for your environment. Add them to the pdns.conf file located in /etc/powerdns or /usr/local/etc/ (depends on your configuration while compiling):
 ; launch=ldap
-You'll have to add the LDAP backend to the PowerDNS backends first by altering the launch declaration in the pdns.conf file. Otherwise the options below won't have any effect.
+You'll have to add the LDAP DNS backend to the PowerDNS backends first by altering the launch declaration in the pdns.conf file. Otherwise the options below won't have any effect.
 ; ldap-host (default <nowiki>"127.0.0.1:389"</nowiki>) : Host name or ip address and optionally the port of the LDAP server. For SSL encrypted connections you must assign a LDAP URI (like "ldaps://127.0.0.1:389") as ldap-host. There can be multiple server specified for load balancing and high availability if they are separated by spaces.
@@ Line 34: / Line 34: @@
 ; ldap-starttls (default "no") : Use TLS encrypted connections to the LDAP server
-; ldap-basedn (default "") : The PowerDNS LDAP backend searches below this path for objects containing the specified DNS information. The retrieval of attributes is limited to this subtree. This option must be set to the path according to the layout of your LDAP tree, e.g. ou=hosts,o=linuxnetworks,c=de is the DN to my objects containing the DNS information.
+; ldap-basedn (default "") : The PowerDNS LDAP DNS backend searches below this path for objects containing the specified DNS information. The retrieval of attributes is limited to this subtree. This option must be set to the path according to the layout of your LDAP tree, e.g. ou=hosts,o=linuxnetworks,c=de is the DN to my objects containing the DNS information.
 ; ldap-binddn (default "") : Path to the object to authenticate against. Should only be used, if the LDAP server doesn't support anonymous binds.
@@ Line 46: / Line 46: @@
 * tree
-: Search entires by translating the domain string into a LDAP dn. Your LDAP tree must be designed in the same way as your DNS tree. The question for "myhost.linuxnetworks.de" would translate into "dc=myhost,dc=linuxnetworks,dc=de,ou=hosts=..." and the entry where this dn points to would be evaluated for dns records.
+: Search entires by translating the domain string into a LDAP dn. Your LDAP tree must be designed in the same way as your DNS LDAP tree. The question for "myhost.linuxnetworks.de" would translate into "dc=myhost,dc=linuxnetworks,dc=de,ou=hosts=..." and the entry where this dn points to would be evaluated for dns records.
 * strict

@@ Line 30: / Line 30: @@
 You'll have to add the LDAP backend to the PowerDNS backends first by altering the launch declaration in the pdns.conf file. Otherwise the options below won't have any effect.
-; ldap-host (default <nowiki>"127.0.0.1:389"</nowiki>) : Host name or ip address and optionally the port of the LDAP server. There can be multiple server specified for load balancing and high availability if they are separated by spaces.
+; ldap-host (default <nowiki>"127.0.0.1:389"</nowiki>) : Host name or ip address and optionally the port of the LDAP server. For SSL encrypted connections you must assign a LDAP URI (like "ldaps://127.0.0.1:389") as ldap-host. There can be multiple server specified for load balancing and high availability if they are separated by spaces.
 ; ldap-starttls (default "no") : Use TLS encrypted connections to the LDAP server

← Older revision	Revision as of 14:49, 17 May 2007
(No difference)

← Older revision	Revision as of 10:47, 15 April 2007
(No difference)

← Older revision		Revision as of 12:11, 1 May 2006
Line 57:		Line 57:

	----		----
−	Back to [[PowerDNS ~~ldapbackend~~\|Overview]]	+	Back to [[PowerDNS LDAP Backend\|Overview]]

@@ Line 25: / Line 25: @@
 There are a few options through the LDAP backend can be configured for your environment. Add them to the pdns.conf file located in /etc/powerdns or /usr/local/etc/ (depends on your configuration while compiling):
 ; ldap-host (default <nowiki>"127.0.0.1:389"</nowiki>) : Host name or ip address and optionally the port of the LDAP server. There can be multiple server specified for load balancing and high availability if they are separated by spaces.
@@ Line 51: / Line 55: @@
 ; ldap-filter-lookup (default <nowiki>"(:target:)"</nowiki> ) : LDAP filter for limiting IP or name lookups, e.g. (&(:target:)(active=yes)) for returning only entries whose attribute "active" is set to "yes".
 ----
 Back to [[PowerDNS ldapbackend|Overview]]