search

bevhost / probind

Professional DNS Management
GNU General Public License v2.0
10 stars 4 forks source link

Multitenancy? #21

Open telefax opened 8 years ago

telefax commented 8 years ago

Not sure if probind is completely dead or not...but have there ever been ideas about implementing multitenancy that would allow ACL per zone?

So Customer/user XYZ only has access to zones XXX and ZZZ and so on.

marado commented 8 years ago

I haven't been touching probind for a few years now, but I was convinced that was already implemented? If not, at least the starting code for it already exists...

marado commented 8 years ago

Read the access function on lib.inc: there are two kinds of users: admin (of the probind installation) and owner (of a set of domains, IIRC). You should be able to have different users being owners of different zones.

marado commented 8 years ago

...even if this is completely implemented as I think it is, this issue shouldn't be closed, tho, but instead turned into an "improve documentation" issue.

telefax commented 8 years ago

Hmm, interesting, I haven't seen any settings for this, also the TODO mentions: "- Integrated authentication system to allow for different access levels" (not sure if its exact same thing).

bevhost commented 8 years ago

One area that is sadly lacking here is integration with reverse zones. If an owner of a zone updates an A record for which the reverse PTR zone is also hosted, ProBind cannot currently determine if the address range specified in the A record is allocated to the owner.