Re: [Pdns-users] pdns-ldap <-> Rudder-ldap

2016-11-21 Thread Grégory Oestreicher

Hi Stan,

Le 14/11/2016 à 23:30, StanC a écrit :

I had this fantasy that one could connect to Rudder's ldap server from
psdn and use it directly as a backend, but I cannot imagine that the
schemas could possible align  . So is there a way to import Rudder's ldap 
node info
the pdns ldap backend, and thereby use it to define A records, etc.?


Well, it depends on how Rudder stores the nodes information. I found a 
specific schema in their repo 
(https://github.com/Normation/rudder/blob/master/rudder-core/src/main/resources/ldap/rudder.schema) 
but nothing indicates they're using a particular attribute to store IP 
addresses. As this schema depends on core.schema and cosine.schema it's 
still possible though that they're using the same attributes as PDNS: 
associatedDomain for the hostname, and various *Record attributes for 
the DNS data (cosine defines aRecord for example). Can you check if 
that's the case?


If they're not using at least the standard attributes there's 
unfortunately no way in the backend to map other attributes to the DNS 
record. In this case the remote backend would be the way to go, as 
suggested earlier.


Cheers,
Grégory - LDAP backend dude
___
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users


Re: [Pdns-users] pdns-ldap <-> Rudder-ldap

2016-11-15 Thread Michael Ströder
StanC wrote:
> Is there a method of translating the ldap schema that Rudder uses for
> its node inventory and using this in a pdns ldap backend?

More or less you're asking for same feature like me:

https://github.com/PowerDNS/pdns/issues/1832

> I had this fantasy that one could connect to Rudder's ldap server from
> psdn and use it directly as a backend, but I cannot imagine that the
> schemas could possible align 

For tight integration with my Æ-DIR I plan to use the remote-backend:

https://doc.powerdns.com/md/authoritative/backend-remote/

http://jpmens.net/2015/11/03/powerdns-with-the-remote-back-end-and-dnssec/

Ciao, Michael.




smime.p7s
Description: S/MIME Cryptographic Signature
___
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users