[Pdns-users] Perl powerDNS API
Hi all, i want to manage our DNS plateform (PDNS servers) through external application. so that i need web services or API to interact dns with our application: Is somebody working on this already. Regards, Fredj Toukebri ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
Re: [Pdns-users] strange resolution problem
On Tue, Jun 22, 2010 at 02:31:44PM +0200, Mario Caruso wrote: Here is an except from the daemon log files, can someone explain me what is happening ? Hi Mario, It is good to hear that you switched to PowerDNS. I hope it will work well for you. Regarding the case below: Jun 22 14:16:43 elan pdns_recursor[26638]: [2048] www.cafsials.it.: Trying IP 213.92.11.34:53, asking 'www.cafsials.it.|A' Jun 22 14:16:43 elan pdns_recursor[26638]: [2048] www.cafsials.it.: Got 2 answers from ns2.register.it. (213.92.11.34), rcode=3, in 41ms Jun 22 14:16:43 elan pdns_recursor[26638]: [2048] www.cafsials.it.: accept answer 'www.cafsials.it.|CNAME|web.dataufficio.com.' from 'cafsials.it.' nameservers? YES! Jun 22 14:16:43 elan pdns_recursor[26638]: [2048] www.cafsials.it.: accept answer 'dataufficio.com.|SOA|ns1.register.it. hostmaster.register.it. 2004061701 10800 3600 604800 86400' from 'cafsials.it.' nameservers? NO! Jun 22 14:16:43 elan pdns_recursor[26638]: [2048] www.cafsials.it.: determining status after receiving this packet Jun 22 14:16:43 elan pdns_recursor[26638]: [2048] www.cafsials.it.: status=NXDOMAIN, we are done The problem here is that 'ns2.register.it' returns an authoritative NXDOMAIN RCode. In this case, the NXDOMAIN is a lie, since you could actually decide to 'trust' that data. However, it is generally not a good idea to make a nameserver program around a bug of someone else. In this case, it is nice that it works in BIND. If you measure, you find that BIND and PowerDNS resolve about the same amount of domains correctly. There will be some domains that work well in PowerDNS and not in BIND and the other way around. So please ask 'register.it' to solve their nameserver. Kind regards, Bert Hubert PS: in powerdns recursor 3.3, this domain will start working anyhow after the first query. So the practical problem is limited there. Jun 22 14:16:43 elan pdns_recursor[26638]: [2048] www.cafsials.it.: failed (res=3) Jun 22 14:16:43 elan pdns_recursor[26638]: 0 [2048] answer to question 'www.cafsials.it.|A': 1 answers, 0 additional, took 2 packets, 0 throttled, 0 timeouts, 0 tcp connections, rcode=3 ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
[Pdns-users] PowerDNSSEC
Hi, I'm currently evaluating the PowerDNSSEC implementation and found 2 issues: -) Is it possible to disable the signing-on-demand feature? I want the powerdns to act as slave to a hidden-master which does the signing of the domain, and the powerdns should just serve the signed zone (without any resigning and without access to the Keys). -) I tried the PostgreSQL-Backend, but I allways received the following error message: TCP server is unable to launch backends - will try again when questions come in: Undefined but needed argument: 'gpgsql-dnssec'. What is the format of the missing gpgsql-dnssec'-Parameter I've to add? Best, Michael ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
Re: [Pdns-users] Perl powerDNS API
thanks for replay, I meen API or web services that will be used by our external application to manage domains, zones, records by adding , modifying , etc. Regards Fredj. --- En date de : Ven 25.6.10, Derrik Pates de...@devrandom.net a écrit : De: Derrik Pates de...@devrandom.net Objet: Re: [Pdns-users] Perl powerDNS API À: pdns-users@mailman.powerdns.com Date: Vendredi 25 juin 2010, 18h44 On 06/25/2010 03:38 AM, fredj toukebri wrote: i want to manage our DNS plateform (PDNS servers) through external application. so that i need web services or API to interact dns with our application: Is somebody working on this already. If you mean an API to manipulate records, there isn't one, and never will be. The idea with PowerDNS is that you can mate it with the record storage solution of your choice (MySQL, PostgreSQL, other DB via OpenDBX, LDAP, or even BIND zones if you must), and update at will (though BIND zones would require explicit reload requests, as with BIND itself). If your records are in a database, just manipulate them, maybe tweak the cache parameters to not hold onto cached data too long, and go on your merry way. Or do you mean something else? If so, what do you have in mind? Internal statistics or something? Also no APIs for it, but I'd bet someone could cough up some simple examples for connecting to PowerDNS and requesting internal metric values. -- Derrik Pates de...@devrandom.net ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
[Pdns-users] MacOS X support/development
Hello All, I've got a G5 XServe running 10.5 - who would I need to talk to if I wanted to offer a ssh login to assist with OS X development of PowerDNS? :-) -- Brielle Bruns The Summit Open Source Development Group http://www.sosdg.org/ http://www.ahbl.org ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
Re: [Pdns-users] PowerDNSSEC
On 06/24/2010 03:08 PM, Michael Braunoeder wrote: Hi, Hi, I'm currently evaluating the PowerDNSSEC implementation and found 2 issues: As no person which is more knowledgable answered your question, I thought I would answer with what I know. -) Is it possible to disable the signing-on-demand feature? I want the powerdns to act as slave to a hidden-master which does the signing of the domain, and the powerdns should just serve the signed zone (without any resigning and without access to the Keys). The disable the 'signing-on-demand'-feature has been discussed on this mailinglist before, the answer was: it will be optional in a future version. -) I tried the PostgreSQL-Backend, but I allways received the following error message: TCP server is unable to launch backends - will try again when questions come in: Undefined but needed argument: 'gpgsql-dnssec'. What is the format of the missing gpgsql-dnssec'-Parameter I've to add? I like your choose of database, but I don't have any information on the current state of this or any other bankend in combination with DNSSEC, other than I've used the 'bind-backend' (text-file). I do know that every database backend needs to implement some basic extra functions before it can work with DNSSEC. That information can be found here: http://wiki.powerdns.com/trac/wiki/PDNSSEC/backends As linked from: http://wiki.powerdns.com/trac/wiki/PDNSSEC But I did see on that page it says: Things to be aware of Only BIND and Generic MySQL (gmysql) backend right now It's also the same page that mentions: Next The completely live auto-signing nature of PowerDNSSEC is not what everyone wants. Other DNSSEC modes will be added soon. Best, Michael ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users ___ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
