-
Notifications
You must be signed in to change notification settings - Fork 1
License
opentelecoms-org/dlz-ldap-enum
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
This is a module (shared object) for bind9 based on the dlz_dlopen API
It is built using autotools - see INSTALL for how to compile it.
Integrating with bind:
----------------------
a) Install the binary using the dlz-ldap-enum package:
# apt-get install dlz-ldap-enum (Debian, Ubuntu)
# yum install dlz-ldap-enum (Fedora, RHEL, CentOS)
or if you built it from source:
make install
or manually install the binary:
cp dlz_ldap_enum.so /usr/lib/.....wherever..../
b) Install the config file
cp dlz_ldap_enum.conf /etc/bind/ (Debian, Ubuntu)
cp dlz_ldap_enum.conf /etc/named/ (Fedora, RHEL, CentOS)
or to whichever directory you use for bind config files.
c) Modify your named.conf to include the new file, e.g. add the following:
include "/etc/bind/dlz_ldap_enum.conf"; (Debian, Ubuntu)
or
include "/etc/named/dlz_ldap_enum.conf"; (Fedora, RHEL, CentOS)
d) If required, create a user in LDAP that the bind process can use to
access the directory.
e) Modify the settings in dlz_ldap_enum.conf to match your environment
f) Delegate domain from your main zone to the sub-zone,
e.g. your main zone = example.org
your ENUM zone = e164-lookup.example.org
=> in the zone file for example.org (possibly called db.example.org),
insert the following:
e164-lookup IN NS hostname-of-nameserver
where `hostname-of-nameserver' is the relative hostname of the
server where you run the dlz-ldap-enum module.
g) Restart bind
Setting up LDAP and testing
---------------------------
Your LDAP server must typically contain entries with attributes
for telephone and email, e.g.:
dn: cn=Tester,dc=example,dc=org
objectClass: inetOrgPerson
cn: Tester
sn: Tests
mail: [email protected]
telephoneNumber: +44207135
Test with the `dig' command:
$ dig @localhost -t any 5.3.1.7.0.2.4.4.e164-rev.test
;; ANSWER SECTION:
5.3.1.7.0.2.4.4.e164-rev.test. 60 IN NAPTR 100 10 "u" "E2U+sip" "!^\\+44207135$!sip:[email protected]!" .
5.3.1.7.0.2.4.4.e164-rev.test. 60 IN NAPTR 100 10 "u" "E2U+xmpp" "!^\\+44207135$!xmpp:[email protected]!" .
You can see what is happening by running the nameserver on the console
in debug mode:
# named -g -d 1
and then you will see all the LDAP queries issues by the server.