Hi All, I need your help with start using dnssec in our environment. We already have a big installation dns servers which based on powerdns and uses as backend - ldap module
launch=ldap ldap-host=ldap://10.5.2.33:389 ldap-basedn=dc=ds,dc=basedomain ldap-binddn=cn=ra,dc=basedomain ldap-secret=oursecret ldap-method=tree #launch+=gmysql #gmysql-dnssec=yes #gmysql-host=10.1.0.24 #gmysql-user=pdns #gmysql-password=muysqlpassword #gmysql-dbname=pdns I found that ldap backend doesn't support dns sec, that's why I create a new installation of mysql server. Also I added mysql backend as second backend and I would like to store dns sec fields inside mysql storage But, during running this configuration I got an errors: Nov 30 11:37:48 /usr/sbin/pdns_server(+0x1b05e6) [0x55e165ff45e6] Nov 30 11:37:48 /lib/x86_64-linux-gnu/libc.so.6(+0x33060) [0x7f5ac6f5c060] Nov 30 11:37:48 /lib/x86_64-linux-gnu/libc.so.6(gsignal+0xcf) [0x7f5ac6f5bfff] Nov 30 11:37:48 /lib/x86_64-linux-gnu/libc.so.6(abort+0x16a) [0x7f5ac6f5d42a] Nov 30 11:37:48 /usr/sbin/pdns_server(+0xdf0bd) [0x55e165f230bd] Nov 30 11:37:48 /usr/sbin/pdns_server(_ZN10DNSBackend22getBeforeAndAfterNamesEjRK7DNSNameS2_RS0_S3_+0x475) [0x55e165f1b635] Nov 30 11:37:48 /usr/sbin/pdns_server(_ZN13PacketHandler7addNSECEP9DNSPacketS1_RK7DNSNameS4_S4_i+0xa1) [0x55e165fe43d1] Nov 30 11:37:48 /usr/sbin/pdns_server(_ZN13PacketHandler8addNSECXEP9DNSPacketS1_RK7DNSNameS4_S4_i+0x14b) [0x55e165fe569b] Nov 30 11:37:48 /usr/sbin/pdns_server(_ZN13PacketHandler18completeANYRecordsEP9DNSPacketS1_R7SOADataRK7DNSName+0x9a) [0x55e165fe5a6a] Nov 30 11:37:48 /usr/sbin/pdns_server(_ZN13PacketHandler17questionOrRecurseEP9DNSPacketPb+0x2836) [0x55e165fe8896] Nov 30 18:37:48 vm01 pdns_server[24828]: Nov 30 11:37:48 /usr/sbin/pdns_server(_ZN13TCPNameserver12doConnectionEPv+0x461) [0x55e166045471] Nov 30 11:37:48 /lib/x86_64-linux-gnu/libpthread.so.0(+0x74a4) [0x7f5ac72cf4a4] Nov 30 11:37:48 /lib/x86_64-linux-gnu/libc.so.6(clone+0x3f) [0x7f5ac7011d0f] Installed packages: vm01:~# dpkg -l|grep pdns ii dnsdist 1.3.3-1pdns.stretch amd64 DNS loadbalancer ii pdns-backend-bind 4.0.3-1+deb9u5 amd64 BIND backend for PowerDNS ii pdns-backend-ldap 4.0.3-1+deb9u5 amd64 LDAP backend for PowerDNS ii pdns-backend-mysql 4.0.3-1+deb9u5 amd64 generic MySQL backend for PowerDNS ii pdns-server 4.0.3-1+deb9u5 amd64 extremely powerful and versatile nameserver # Is there any way to get dnssec up and running with ldap backend?
_______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users