Opera's LDAP-authenticated PowerDNS user interface
A tool to manage a PowerDNS authoritative server in a corporate LDAP-driven environment.
You can view the DNS UI in action on the demonstration server.
Use one of the following sets of username / password credentials to log in:
All data on this demonstration server is reset nightly at 00:00 UTC.
The current version is only compatible with PowerDNS 4.0.4 and higher. Previous 4.0.x versions suffer from a critical API bug related to TTL values.
As another option, you can use PowerDNS 3 with Opera DNS UI v0.1.3, but the 0.1 version of the DNS UI will not receive any new features or non-critical fixes.
Configure PowerDNS:
webserver=yes
webserver-address=...
webserver-allow-from=...
webserver-port=...
api=yes
api-key=...
Clone this repo to somewhere outside of your default web server document root.
Create a postgresql user and database.
createuser -P dnsui-user
createdb -O dnsui-user dnsui-db
Add the following directives to your web server configuration (eg. virtual host config):
Apache:
DocumentRoot /path/to/dnsui/public_html
DirectoryIndex init.php
FallbackResource /init.php
AllowEncodedSlashes NoDecode
nginx:
root /path/to/dnsui/public_html;
index init.php;
location / {
try_files $uri $uri/ @php;
}
location @php {
rewrite ^/(.*)$ /init.php/$1 last;
}
location /init.php {
fastcgi_pass unix:/run/php/php7.0-fpm.sock ;
include /etc/nginx/snippets/fastcgi-php.conf;
}
Set up an authentication module for your virtual host (eg. authnz_ldap for Apache).
Copy the file config/config-sample.ini
to config/config.ini
and edit the settings as required.
Set scripts/ldap_update.php
to run on a regular cron job.
Anyone in the LDAP group defined under admin_group_cn
in config/config.ini
will be able to add and modify all zones.
They will also be able to grant access under "User access" for any zone to any number of users.
By going to the URL /api/v2
with your web browser you can see documentation of the rest API, including all of the
available API methods. See this on the demo server.
Copyright 2013-2018 Opera Software
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.