On 21.05.2013 11:16, Petr Spacek wrote: > On 21.5.2013 07:00, Timo Aaltonen wrote: >> No I meant the huge-ish patch to BIND that bind-dyndb-ldap depends on, >> available here: >> >> https://github.com/mnagy/bind-dynamic_db/downloads >> >> I haven't asked the Debian maintainer yet, but suspect there would be >> opposition to adding it to the bind package.. so upstream would be >> preferable of course. > > We contacted ISC a year ago and here is a reply from them (reply from > Evan Hunt via RT): >> At a cursory glance this looks like quite good code, and we might >> indeed be >> interested in accepting it into BIND 9, as it has at least one feature >> we had >> hoped to support eventually (external database with the ability to serve >> DNSSEC). >> >> We can't commit it in its current form for a few reasons: first, >> there are no >> tests or documentation; second, there is no sample driver we can >> provide as >> guidance to implementors. (The LDAP driver you pointed to is good, >> but it's >> GPL, which means ISC is forbidden by corporate charter from shipping it.) >> >> We can probably help with tests and doc, but a sample driver with a BSD- >> compatible license would be a huge help, even if it only served static >> zones >> (such as the one in bind9/bin/tests/system/dlzexternal/driver.c). >> >> Out of curiosity, why did you decide to add a new API and new >> 'dynamic-db' >> configuration syntax instead of extending or improving the existing >> DLZ API? >> Would a merged approach be workable? Minimizing the number of >> different ways to >> accomplish the same thing would be desirable, if feasible. >> >> I see a few trivial ISC code-style incompatibilities, but nothing to >> worry about >> on that account. I'm planning to commit your patch to a CVS branch >> for further >> work, and will review the code in more detail later. > > From that time we didn't have time to move it forward. Any help is > appreciated!
Thanks for the update! I'm afraid what little time I have is best spent on getting rest of the stack ready for Debian/Ubuntu though ;) -- t _______________________________________________ Freeipa-users mailing list Freeipaemail@example.com https://www.redhat.com/mailman/listinfo/freeipa-users