gmane.network.dns.powerdns.devel

pdns 3.1 Solaris patches and status report

a b — 2012-05-24T14:20:31

Hello list,

Attached to this e-mail are several assorted  patches  needed  to
build pdns 3.1 on Solaris 10.

Features:
- goracle / oracle backend  ORACLE_HOME  and  ORACLE_SID  support
  (thanks to Mr. Tuomi);
- support for linking with the Solaris 10 bundled PostgreSQL 8.3,
  32- and 64-bit  (requires  building  on  Solaris  10  u8  at  a
  minimum);
- linking with $ORIGIN ld(1)  keyword,  enabling  relocation  and
  obviating the need for LD_LIBRARY_PATH hacks

The good news is that for the most part, pdns 3.1 needed  minimal
surgery to build on Solaris, a huge improvement.

In addition to pdns_recursor, we have attained full SMF  integra-
tion of pdns_server(1M) and the POWERDNS Oracle database with SMF
on Solaris 10 i86pc platform:

svc:/site/oracle:powerdns (PowerDNS Oracle database)
 State: online since Thu May 24 07:57:53 2012
   See: /var/svc/log/site-oracle:powerdns.log
Impact: None.

svc:/site/powerdns:server (PowerDNS authoritative name server)
 State: online since Thu May 24 07:57:38 2012
   Se

Re: oracle backend

a b — 2012-05-24T13:57:08

 >
 >
 
The patch works, and has been integrated into  our  Solaris  pdns
source archive. Good work.

What we might need to do is add the equivalents of  "oracle-home"
and  "oracle-sid"   for  the  Oracle R/W "master" database, but I
guess we can cross that bridge when we come to it.

Re: Patch: RRSIG-records for wildcard records inpresigned zones with PowerDNS 3.1 auth (ticket 460)

Sebastiaan Hoogeveen — 2012-05-09T10:39:14

Hi Peter,

On 9 mei 2012, at 12:10, Peter van Dijk wrote:


Patch has been added to the ticket.

Kind regards,

Re: Patch: RRSIG-records for wildcard records inpresigned zones with PowerDNS 3.1 auth (ticket 460)

Peter van Dijk — 2012-05-09T10:10:14

Hi Sebastiaan,

On May 9, 2012, at 10:55 , Sebastiaan Hoogeveen wrote:


Thanks, nice find! Could you attach the patch to ticket 460 so there's a full story there?

Kind regards,

Patch: RRSIG-records for wildcard records in presignedzones with PowerDNS 3.1 auth (ticket 460)

Sebastiaan Hoogeveen — 2012-05-09T08:55:47

Hi,

Please find attached a patch for the issue I rambled on about in ticket 460.

In short: when running a zone in presigned mode and querying a name for which only a matching *.domain.com record exists, PowerDNS does not add an RRSIG record to the result. The attached patch lets PowerDNS add the RRSIG record for the wildcard record with the same name as the original queried name, which is identical to the records PowerDNS returns when doing live signing.

Kind regards,

Re: lua script to synthesize AAAA record from A record

Muntasir Rahman — 2012-05-04T13:47:26

Hello Peter,
I have solved it, after several minutes learning lua syntax, and examining
pdns_recursor.cc,

1 function nodata (remoteip, domain, qtype, records)
2    print("nodata : ", remoteip, domain, qtype, records)
3    if qtype ~= pdns.AAAA then return -1,{} end
4    setvariable()
5    return getFakeAAAARecords (domain, "0:0:0:0:0:ffff:0:0")
6 end

I modified line 6 to
*return getFakeAAAARecords (domain, "0:0:0:0:0:ffff:0:0")
*previously:
return "getFakeAAAARecords, domain, "0:0:0:0:0:ffff:0:0"

I suggest minor correction at powerdns-example-script.lua as above
http://wiki.powerdns.com/trac/browser/trunk/pdns/pdns/powerdns-example-script.lua

Regards,
Muntasir

On Fri, May 4, 2012 at 7:55 PM, Muntasir Rahman
<muntasir.rahman< at >gmail.com>wrote:

_______________________________________________
Pdns-dev mailing list
Pdns-dev< at >mailman.powerdns.com
http://mailman.powerdns.com/mailman/listinfo/pdns-dev

Re: lua script to synthesize AAAA record from A record

Muntasir Rahman — 2012-05-04T12:55:03

Hello Peter,
Thanks for the clue. I have tried it. But, it return an error message like
this: PANIC: unprotected error in call to Lua API.

I download the source, with lua hook to nodata function from here:
http://svn.powerdns.com/snapshots/pdns-recursor-3.3-hooks.tar.bz2

i compile & run it using these steps:
$ LUA=1 ./configure
$ LUA=1 make
./pdns_recursor --local-address=0.0.0.0 --local-port=5300 --daemon=no
--socket-dir=./ --lua-dns-script=dns64.lua

Here is the lua script (copy-paste from
http://wiki.powerdns.com/trac/browser/trunk/pdns/pdns/powerdns-example-script.lua
):

function nodata (remoteip, domain, qtype, records)
    print("nodata : ", remoteip, domain, qtype, records)
    if qtype ~= pdns.AAAA then return -1,{} end
    setvariable()
    return "getFakeAAAARecords", domain, "0:0:0:0:0:ffff:0:0"
end

At a terminal, i launch this command:
dig < at >127.0.0.1 -p 5300 www.kame.com AAAA

Aand i got this error message at recursor's terminal:
PANIC: unprotected error in call to Lua API (attempt to index a

PowerDNS Authoritative Server 3.1 has been released

Peter van Dijk — 2012-05-04T11:35:37

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi everybody,

PowerDNS Authoritative Server 3.1 is now available!

3.1 is the best version of the PowerDNS Authoratitive Server currently
available, and we recommend upgrading to it. Please read 
http://doc.powerdns.com/from3.0to3.1.html before you do, however!

If you are coming from 2.9.x, please read
http://doc.powerdns.com/upgrades.html#from2.9to3.0 in addition to the 3.0->3.1
notes.

Please see http://doc.powerdns.com/changelog.html#changelog-auth-3-1 for full
release notes and all download links.

You can get PowerDNS 3.1 from:

http://downloads.powerdns.com/releases/pdns-3.1.tar.gz
http://downloads.powerdns.com/releases/deb/pdns-static_3.1-1_i386.deb
http://downloads.powerdns.com/releases/deb/pdns-static_3.1-1_amd64.deb
http://downloads.powerdns.com/releases/rpm/pdns-static-3.1-1.i386.rpm
http://downloads.powerdns.com/releases/rpm/pdns-static-3.1-1.x86_64.rpm

These files also come with GPG signatures (append .sig).

Additionaly, Kees Monshouwer has kind

Re: lua script to synthesize AAAA record from A record

Peter van Dijk — 2012-05-04T10:42:24

Hello Muntasir,

On May 4, 2012, at 6:47 , Muntasir Rahman wrote:


You don't. getFakeAAAARecords handles this. Just returning "getFakeAAAARecords", domain, "0:0:0:0:0:ffff:0:0" should work.

(You can't say "::ffff" or "::ffff:" - the first would cause the v4 address to just overwrite those bits and the last would be a parse error).

Kind regards,

lua script to synthesize AAAA record from A record

Muntasir Rahman — 2012-05-04T04:47:50

Hi All,

My boss asked me to modify PNDS to be able to support DNS64 specification.
DNS64 specification mandates DNS resolver to synthesize AAAA record from A
record, if AAAA record is missing. I started with Lua script example of
PDNS recursor. But i could not find any clue on how to get A record from
nodata function parameters:

http://wiki.powerdns.com/trac/browser/branches/pdns-dns64/pdns/powerdns-example-script.lua

function nodata ( remoteip, domain, qtype, records )
    print ("nodata called for: ", remoteip, getlocaladdress(), domain,
qtype)
    if qtype ~= pdns.AAAA then return -1, {} end  --  only AAAA records
    setvariable()
    return "getFakeAAAARecords", domain, "fe80::21b:77ff:0:0" -- here i
need to return ::ffff:ipv4.dotted.decimal.format
end

I would like to do something like this

    ipv4 = "1.2.3.4" -- how do i get this data from recursor ???
    ipv6 = "::ffff:" .. ipv4  -- synthesized representation of IPv4 in IPv6
    return "getFakeAAARecords", domain, ipv6

My question is:
- how do

Re: oracle backend

Peter van Dijk — 2012-05-03T14:52:13

Hi,

On May 3, 2012, at 15:55 , a b wrote:


It is a patch for both oraclebackend and goraclebackend.


If you could offer anything to add to the oraclebackend documentation, please let us know. Also, if you haven't already, please let us know what you patches in soracle.cc


goraclebackend was designed to be 'in line' with the other gsql backends, and gsql backends have (by default, at least) the simplest scheme possible. The oraclebackend, on the other hand, was developed to take full advantage of Oracle features.

Kind regards,

Re: oracle backend

a b — 2012-05-03T13:55:33

 

Thank You for Your reply. Unless I am mistaken, this appears to be a patch for goracle backend?

I am sorry to say I had to abandon the "goracle" backend because I could not figure out 
what exactly was expected of me to do to make it work. Some examples in the documentation would have been highly beneficial.

What I did figure how
 to use is the oracle backend, and after patching "soracle.cc" it seems to work fine, at least in 
the testing we have performed so far on pdns_server 3.0.1.

By the way, do you know why the database schemas differ so much between the "oracle" and "goracle" backends?

 
I acutally patched the Oracle Makefiles, and relinked our Oracle packages with -R$ORIGIN:$ORIGIN/../lib, and split so linked client libraries into their own discrete package, so that LD_LIBRARY_PATH is completely unnecessary, and is never required.

With the $ORIGIN keyword inside of the shared object libraries, the package is now completely relocatable anywhere on the system, as long as the relative structure

Re: oracle backend

Aki Tuomi — 2012-05-03T05:31:40

http://cmouse.desteem.org/20120502_oracle_env.diff

This should help with the missing vars. Although you might want to edit/create
/etc/ld.so.conf.d/oracle.conf or /etc/ld.so.conf and put the path where the
client libraries is to it. Either that or add LD_LIBRARY_PATH to startup script

If this works I'm sure pdns folks will be happy to add it the trunk svn,
but I can already give it "works for my oracle xe instance". 

Aki Tuomi
_______________________________________________
Pdns-dev mailing list
Pdns-dev< at >mailman.powerdns.com
http://mailman.powerdns.com/mailman/listinfo/pdns-dev

Re: New feature request

Peter van Dijk — 2012-05-02T12:16:23

Hello Tibor,

On May 2, 2012, at 9:47 , Tibor Benke wrote:


Login information for our trac is on the trac frontpage.

Just to be clear: do you mean 'also' or do you mean 'restrict'? Please be as clear as possible, especially in your Trac ticket.

Kind regards,

New feature request

Tibor Benke — 2012-05-02T07:47:17

Hi,

I made a question to pdns-user list about the AXFR notification of
bindbackend and they said I should send a feature request. I was
looking for a feature which can send Notify message not only to all
IPs of NS records in zones but also to a list of IPs. I want to
restrict the messages. How can I suggest this feature? I didn't find
this solution on Trac, I haven't got account to it.

Sincerely,
Tibor

Re: oracle backend

Peter van Dijk — 2012-04-30T18:26:30

Hi,

On Apr 30, 2012, at 20:24 , a b wrote:


This never hurts; however, note that we currently do not have an Oracle development environment so it might take some time.

Kind regards,

Re: oracle backend

a b — 2012-04-30T18:24:05

 
I have now, and it appears to work, however we will need to INSERT more records to be 100% certain.
 
Going through the documentation again, I found this tiny little blob:
 
"If your connection requires environment variables to be set, e.g. ORACLE_HOME, NLS_LANG, or LD_LIBRARY_PATH, make sure these are set when PowerDNS runs. /etc/default/pdns might help."
 
That is very easy to miss, and it does not state what criteria is to be used to determine whether "my connection requires it". Perhaps the wording could be changed to make it clear that currently, ORACLE_HOME and ORACLE_SID environment variables must be set before launching pdns_server?
 
Also, Solaris has no facility which would source settings in /etc/default/. On Solaris, it is the responsibility of each and every application to source any settings in /etc/default, and generally, that particular directory is off limits to 3rd party and unbundled applications, as it belongs to the OS vendor.
 
I had assumed that pdns.conf settings would have been en

Re: oracle backend

Aki Tuomi — 2012-04-30T16:44:46

Also looking at other oracle setup, you might need following enviroment 
variables:

ORACLE_SID, ORACLE_BASE (parent for ORACLE_HOME), USERPWD (this can 
be defined in backend too, but takes username/password) and ORACLE_HOME

Some of these are set by the backend, others are not. By the looks of it,
the username,password and database is set. Rest is up to you. 

So you should check that ORACLE_SID, ORACLE_BASE and ORACLE_HOME are correct. 

Aki Tuomi
_______________________________________________
Pdns-dev mailing list
Pdns-dev< at >mailman.powerdns.com
http://mailman.powerdns.com/mailman/listinfo/pdns-dev

Re: oracle backend

Aki Tuomi — 2012-04-30T16:28:52

Also, please do check that this is not related to privileges. The user you
run pdns as should be able to access the files under ORACLE_HOME and they 
quite often are somehow protected.

Aki Tuomi
_______________________________________________
Pdns-dev mailing list
Pdns-dev< at >mailman.powerdns.com
http://mailman.powerdns.com/mailman/listinfo/pdns-dev

Re: oracle backend

Peter van Dijk — 2012-04-30T16:20:55

Hi,

On Apr 30, 2012, at 15:55 , a b wrote:


Have you set the relevant environment variables, like ORACLE_HOME?


All these symbols are inside pdns_server. With the error you are getting, loading liboraclebackend.so has already succeeded. 

Kind regards,

oracle backend

a b — 2012-04-30T13:55:04

Hello list

For the past few weeks we have been working on getting pdns 3.0.1 to work on SunOS with the oracle backend. Having created the database and the schema, we have started inserting records into the tables. However, we ran into a wall when actually trying to get any data out of pdns_server:

Apr 29 17:13:29 Reading random entropy from '/dev/urandom'
Apr 29 17:13:29 This is a standalone pdns
Apr 29 17:13:29 Listening on controlsocket in '/var/run/pdns.controlsocket'
Apr 29 17:13:29 It is advised to bind to explicit addresses with the --local-address option
Apr 29 17:13:29 UDP server bound to 0.0.0.0:53
Apr 29 17:13:29 TCP server bound to 0.0.0.0:53
Apr 29 17:13:29 PowerDNS 3.0.1 (C) 2001-2011 PowerDNS.COM BV (Apr 17 2012, 15:18:33, gcc 3.4.3 (csl-sol210-3_4-branch+sol_rpath)) starting up
Apr 29 17:13:29 PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2.
Apr 29 17:13:29 DNS Proxy launched, local port 26