Re: [Ldapdns-users] ldapaxfr - axfr rights

[Mrs. B. <mrs...@ni...>]

There is a known bug in the AXFR switch handling code. Until then, if
you really need AXFR, use tcpserver and it's cdb-based rules file.

On Wed, 2003-08-06 at 15:28, Pet...@gm... wrote:
> hi,
> 
> I´ve installed ldapdns 2.04 on a Gentoo Linux System. It works very well and
> I´m very surprised.
> But I´ve got a problem with ldapaxfr. If I set the environment variable on
> AXFR=. I can retrieve all the data. With AXFR=de I just get data from TLD de. 
> However, I couldn´t find a configuration that allows me to define which IP
> can interrogate which zone (like axfrdns).
> Configurations like /var/lib/ldapdns/root/axfr don´t have any effect.
> Can someone give me an example how a computer with the IP 123.345.567 can
> call the domain my.example.tld ?
> With the following command I tried to get out which data were read:
> strace -e trace=open,close,read,write -f -o  axfr.log /etc/init.d/ldapaxfr
> start
> the result was:
> 25148 open("search", O_RDONLY)          = -1 ENOENT (No such file or
> directory)
> 25148 open("switch", O_RDONLY)          = -1 ENOENT (No such file or
> directory)
> 25148 open("axfr", O_RDONLY)            = 4
> 25148 read(4, "de=127.0.0.1\n", 4096) = 20
> Why do I need search and switch for ldapaxfr?
> de=127.0.0.1 means TLD de could be transfered to the IP 127.0.0.1 Is this
> right?
> 
> Thank you in advance
> Peter