Reasons to upgrade?

Tomas Krizek tkrizek at redhat.com
Wed Jan 18 15:52:35 UTC 2017


On 01/18/2017 04:02 PM, lbutlr wrote:
> It looks like there are three version of Bindcurrently supported, 9.9.9, 9.10, and 9.11.
>
> Are there specific reasons to move from 9.9 to 9.10 or 9.11 other than the usual "it's newer and you're going to have to move at some point anyway"?
>
> Any gotchas?
For users of bind-dyndb-ldap (LDAP driver for BIND), there's a
significant change in BIND 9.11.

An API for dynamic database was accepted upstream, so patching the
upstream BIND is no longer necessary. However, the upstream API is a bit
different, which has two implications.

First, the minimal required version of bind-dyndb-ldap is the recently
released v11.0 [1].

Second, you have to transform your named.conf section which configures
the dynamic database to reflect the new API. You can see an example of
the new configuration format in the Configuration section of the README
file [2]. If you'd like to do this automatically, there is an upstream
pull request that has a sed script [3].

[1] - https://fedorahosted.org/released/bind-dyndb-ldap/
[2] - https://git.fedorahosted.org/cgit/bind-dyndb-ldap.git/tree/README.md
[3] - https://github.com/freeipa/bind-dyndb-ldap/pull/7

-- 
Tomas Krizek

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170118/2e05f20c/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170118/2e05f20c/attachment.bin>


More information about the bind-users mailing list