RE: Can't use Bind DLZ through LDAPS SSL

2021-02-14 Thread Dario García Díaz-Miguel
Hi Ted, Thank you again for your reply, very appreciated. Yes, I'm using the Bind-DLZ site's examples to build my own configuration: dlz "ldap zone" { database "ldap 2 v3 simple {uid=bind/test-machine.example.com,ou=Services,dc=example,dc=com} {secret} localhost ldap:///dlzZoneName=\$zone\$,ou=

Re: Problems with interfaces going down

2021-02-14 Thread Mark Andrews
Linux already uses capabilities so it doesn’t have this issue. FreeBSD there are sysctl settings to allow specific non-root users to bind to specify addresses. > On 15 Feb 2021, at 15:26, Paul Kosinski via bind-users > wrote: > > Would it be possible to use a virtual interface from within bin

Re: Problems with interfaces going down

2021-02-14 Thread Paul Kosinski via bind-users
Would it be possible to use a virtual interface from within bind/named that gets mapped by some privileged facility to a hardware interface? (This is the sort of thing that VMs have to do all the time.) For example, could a brctl bridge help? Or maybe CAP_NET_BIND_SERVICE would allow the interf

Re: Problems with interfaces going down

2021-02-14 Thread Mark Andrews
> On 13 Feb 2021, at 10:33, bindus...@prograde.net wrote: > > Greetings, > > I’ve been fighting a two-fold problem with named (bind 9.16.11) running on > macOS. > > 1: If an ethernet interface being listened to drops link, named immediately > stops listening to it: > > 12-Feb-2021 17:33:19.