From: Mrs. B. <mrs...@ni...> - 2004-12-04 01:38:26
|
On Sun, 2004-11-21 at 18:56 +0200, The Ranger wrote: > However now I've spent last couple of hours trying to figure out how to > make the zone transfers work in v3 of LDAPDNS. Unfortunately I have not > managed to find a solution. > > As far as I understand it is required to run the ldapdns-vc script via > some sort of virtual circuit software. Could anyone give me some hints > how to do it (e.g. using inetd although it is not recommended)? The term virtual circuit is ubiquitous; over Internet, it refers to a TCP connection. > Does it have to be run directly or using the shell script as a wrapper > like the main LDAPDNS daemon requires? listenvc can be used. tcpserver offers better controls. > Is the AXFR variable needed? it's set up by listenvc or tcpserver and specifies which part of dns- space is accessible via AXFR. If it's unset, listenvc+ldapdns-vc is simply a dns-over-tcp server. > It was clear that if I want to do AXFR I have to create the soaRecord > attribute for that domain. Are there any other things that must be done > in order to make it work? That's not necessary if you only want to OFFER axfr (such as some TLD's require). If you want to negotiate AXFR for keeping data in sync, you will need to specify sOARecord formally. |