zone2ldap (1) - Linux Manuals

zone2ldap: Load BIND 9 Zone files into LDAP Directory


zone2ldap /- Load BIND 9 Zone files into LDAP Directory


zone2ldap [-D Bind DN] [-w Bind Password] [-b Base DN] [-z Zone] [-f Zone File ] [-h Ldap Host] [-cd] [-v]


zone2ldap will parse a complete BIND 9 format DNS zone file, and load the contents into an LDAP directory, for use with the LDAP sdb back-end.

If the zone already exists, zone2ldap will exit succesfully. If the zone does not exists, or partially exists, zone2ldap will attempt to add all/missing zone data.


LDAP Base DN. LDAP systems require a "base dn", which is generally considered the LDAP Directory root. If the zone you are loading is different from the base, then you will need to tell zone2ldap what your LDAP base is.
Print version information, and immediatly exit.
Zone file. Bind 9.1 compatible zone file, from which zone information will be read.
Dump debug information to standard out.
LDAP Bind password, corresponding the the value of "-b".
LDAP Directory host. This is the hostname of the LDAP system you wish to store zone information on. An LDAP server should be listening on port 389 of the target system. This may be ommited, and will default to "localhost".
This will create the zone portion of the DN you are importing. For instance, if you are creating a zone, zone2ldap should first create "dc=domain,dc=com". This is useful if you are creating multiple domains.
This is the name of the zone specified in the SOA record.


Following are brief examples of how to import a zone file into your LDAP DIT.

Loading zone, with an LDAP Base DN of dc=domain,dc=com

zone2ldap -D dc=root -w secret -h localhost -z -f

This will add Resource Records into an ALREADY EXISTING dc=domain,dc=com. The final SOA DN in this case, will be dc=@,dc=domain,dc=com

Loading, if your LDAP Base DN is dc=provider,dc=net.

zone2ldap -D dc=root -w secret -h localhost -z -b dc=provider,dc=net -f -c

This will create dc=customer,dc=com under dc=provider,dc=net, and add all necessary Resource Records. The final root DN to the SOA will be dc=@,dc=customer,dc=com,dc=provider,dc=net.


Send all bug reports to Jeff McNeil <jeff [at]>


Jeff McNeil <jeff [at]>