The way things are setup now in bind, the admin would still need to manually configure the slave servers on the master to add them to an ACL of servers allowed to do zone transfers. We could automate this config, which would just be adding a blurb on top of the bind.conf to list all the slaves and allow their transfer.
This would look something like:
allow-transfer {192.168.0.3;};
(Similarly, the slaves could be configured to allow notifies from the master servers, using allow-notify (192.168.0.15; 192.168.0.16; 10.0.0.1;);
, although that is optional: the allow-transfer is really a must otherwise things just don't work right.)
(Shamelessly stolen from the bind manual at http://www.zytrax.com/books/dns/ch7/xfer.html)
Comments
Comment #1
anarcat CreditAttribution: anarcat commentedthis was easier than i thought, fixed and pushed to git.
i had to add a blurb for each zone otherwise we would have had created a options {} block in aegir's bind configuration which would very probably conflict with existing options {} blocks (there can be only one in bind, sheesh...).