search

loewexy / pdnsmanager

A simple administration interface for PowerDNS nameserver.
Apache License 2.0
176 stars 49 forks source link

Working with dnssec? #1

Open broedli opened 8 years ago

broedli commented 8 years ago

Hi, I just stumbled over your neat little project and got a question.

Since you state gmysql-dnssec=no in your documentation I'm asking myself if there are any Issues with the PDNS Manager and this aspect of powerdns functionality? If so, what kind of problems are to be expected?

loewexy commented 8 years ago

The main problem in supporting DNSSec is that I do not fully understand how DNSSec works with Powerdns and mysql-backend. The Powerdns documentation is a little short on this topic. Nevertheless DNSSec support is on my wishlist of features to support and should be one of the next improvements.

broedli commented 8 years ago

First off, thanks for your fast answer. I have installed PDNS Manager onto a configured Instance and there are a few things I've noticed which could be handled a little "better":

  1. Currently the Content of the table has no max length or soft wrap, that can lead to a really "long" page. For example: a DKIM record may get you scrolling for a while. The navigation / control of a record becomes a "scroll fiesta".
  2. When adding a new record there should be default values for the fields ttland prio when left empty.
  3. A failure is not marked visually. For example adding a new record while leaving ttl and / or prio empty.
  4. When hovering a domain record the text cursor is shown instead of the "finger pointer". I think it's confusing that there is no visual indication for a link. ... Uhm, It's late and I'm tired and I don't think I can make myself clear currently ... coming back tomorrow.

P.S. I really like the clean design / layout and simple user interface. Don't want to come across as if I'm here to mock ...

P.P.S. I sadly have no clue how pdns handles it's dnssec with mysql. The only odd thing I've noticed is that pdns creates empty records when rectifying a domain.

loewexy commented 8 years ago

Thanks for your Feedback. This are separate Issues and have nothing to do with the DNSSec support. I created new Issues for those which I could reproduce. You may subscribe to those. I can not understand your 3rd point cause the fields are marked red when leaved empty, if i misunderstood you feel free to create an issue also for that.

I will do DNSSec support as soon as I have enough time to understand how Powerdns handles it. If someone does understand how it works any help is appreciated.

Kraeutergarten commented 7 years ago

Is there any update?

morremeyer commented 7 years ago

DNSSEC is definitely on our list of things to implement in 2.X, but there's no schedule for it yet.

bicisteadm commented 4 years ago

Is there any news about DNSSEC? I don't see anything in the documentation.

loewexy commented 4 years ago

No there is currently nothing new. I guess one could use the Powerdns command line tools to do that.

julian70400 commented 4 years ago

Hello, any news ?

loewexy commented 4 years ago

No unfortunately ther is no progress.

julian70400 commented 4 years ago

When I use : pdnsutil secure-zone myzone and do : pdnsutil show-zone myzone

Should I manually create DS and CSK entry in Pdnsmanager or I should NOT use dnssec at all ?

loewexy commented 4 years ago

I really do not have a clue here. I personally do not use dnssec. But if you get it to work with the CLI that should also be fine.