BIND + LDAP ERROR

[Adam Tkac]

Marcio Garcia napsal(a):
> Hi,
>
>    I am trying to configure BIND + LDAP but I had some problems:
>
>    My named daemon starts but occurs a error in my log file:
>
>    Segue abaixo informações das entradas do LDAP, meu named.conf e os
> erros do daemon.log (loading zone: creating database: failure):
>
> # tail /var/log/daemon.log
>
> Aug  2 05:09:19 localhost named[3406]: zone 0.0.127.in-addr.arpa/IN:
> loaded serial 1997022700
> Aug  2 05:09:19 localhost named[3406]: zone exemplo.com.br/IN: loading
> zone: creating database: failure
> Aug  2 05:09:19 localhost named[3406]: zone localhost/IN: loaded
> serial 42
> Aug  2 05:09:19 localhost named[3406]: running
>
>
>
> 1- My Bind version: 9.4.1
>
>
> 2- My LDAP base:
>
> dn: dc=DNS,l=SP,c=BR
> objectClass: dcObject
> objectClass: locality
> l: SP
> dc: DNS
>
> dn: dc=Exemplo,dc=DNS,l=SP,c=BR
> objectClass: dcObject
> objectClass: locality
> l: SP
> dc: Exemplo
>
> dn: relativeDomainName=@,dc=Exemplo,dc=DNS,l=SP,c=BR
> objectClass: dNSZone
> relativeDomainName: @
> zoneName: exemplo.com.br.
> dNSTTL: 3600
> dNSClass: IN
> sOARecord: exemplo.com.br. hostmaster.exemplo.com.br. 2004080100 3600
> 1800 604800 86400
> nSRecord: exemplo.com.br.
>
> dn: relativeDomainName=server,dc=exemplo,dc=DNS,l=SP,c=BR
> objectClass: dNSZone
> relativeDomainName: server
> zoneName: exemplo.com.br.
> dNSTTL: 86400
> dNSClass: IN
> aRecord: 192.168.200.1
>
> dn: relativeDomainName=www,dc=exemplo,dc=DNS,l=SP,c=BR
> objectClass: dNSZone
> relativeDomainName: www
> zoneName: exemplo.com.br.
> dNSTTL: 86400
> dNSClass: IN
> aRecord: 192.168.200.1
>
> dn: relativeDomainName=mail,dc=exemplo,dc=DNS,l=SP,c=BR
> objectClass: dNSZone
> relativeDomainName: mail
> zoneName: exemplo.com.br.
> dNSTTL: 86400
> dNSClass: IN
> aRecord: 192.168.200.1
> mXRecord: 5 mail.exemplo.com.br.
>
>
> 3- My named.conf
>
> options {
>        directory "/var/named";
>        allow-transfer { 192.168.200.1; 192.168.200.23; };
> };
>
> zone "." IN {
>        type hint;
>        file "named.ca";
> };
>
> zone "localhost" IN {
>        type master;
>        file "localhost.zone";
>        allow-update { none; };
> };
>
> zone "0.0.127.in-addr.arpa" IN {
>        type master;
>        file "named.local";
>        allow-update { none; };
> };
>
> zone "exemplo.com.br" IN {
>        type master;
>        database "ldap ldap://127.0.0.1/dc=exemplo,dc=DNS,l=SP,c=BR";
> };
>
>
>
> Bye,
>
>
> Marcio Garcia
>
>
>   
Did you compiled your bind yourself? How did you do it? Because it isn't 
easy compile bind with ldap backend. You could find help in 
bind/contrib/sdb/ldap/INSTALL.ldap or on 
http://www.venaas.no/ldap/bind-sdb/ . Also make sure if you're using 
openldap with deprecated API (see if LDAP_API_VERSION macro in ldap.h >= 
3001) than you're compiling bind with -DLDAP_DEPRECATED. Or you could 
try Red Hat's bind (http://people.redhat.com/atkac/bind/) which has this 
feature implemented :)

Regards, Adam

Regards, Adam