[Freeipa-users] [Freeipa-devel] Announcing bind-dyndb-ldap version 3.2

[Timo Aaltonen]

On 21.05.2013 11:16, Petr Spacek wrote:
> On 21.5.2013 07:00, Timo Aaltonen wrote:
>> No I meant the huge-ish patch to BIND that bind-dyndb-ldap depends on,
>> available here:
>>
>> https://github.com/mnagy/bind-dynamic_db/downloads
>>
>> I haven't asked the Debian maintainer yet, but suspect there would be
>> opposition to adding it to the bind package.. so upstream would be
>> preferable of course.
> 
> We contacted ISC a year ago and here is a reply from them (reply from
> Evan Hunt via RT):
>> At a cursory glance this looks like quite good code, and we might
>> indeed be
>> interested in accepting it into BIND 9, as it has at least one feature
>> we had
>> hoped to support eventually (external database with the ability to serve
>> DNSSEC).
>>
>> We can't commit it in its current form for a few reasons:  first,
>> there are no
>> tests or documentation; second, there is no sample driver we can
>> provide as
>> guidance to implementors.  (The LDAP driver you pointed to is good,
>> but it's
>> GPL, which means ISC is forbidden by corporate charter from shipping it.)
>>
>> We can probably help with tests and doc, but a sample driver with a BSD-
>> compatible license would be a huge help, even if it only served static
>> zones
>> (such as the one in bind9/bin/tests/system/dlzexternal/driver.c).
>>
>> Out of curiosity, why did you decide to add a new API and new
>> 'dynamic-db'
>> configuration syntax instead of extending or improving the existing
>> DLZ API?
>> Would a merged approach be workable?  Minimizing the number of
>> different ways to
>> accomplish the same thing would be desirable, if feasible.
>>
>> I see a few trivial ISC code-style incompatibilities, but nothing to
>> worry about
>> on that account.  I'm planning to commit your patch to a CVS branch
>> for further
>> work, and will review the code in more detail later.
> 
> From that time we didn't have time to move it forward. Any help is
> appreciated!

Thanks for the update! I'm afraid what little time I have is best spent
on getting rest of the stack ready for Debian/Ubuntu though ;)


-- 
t