MARWAN docs NOC knowledge baseHow to install openldap server on rocky linux 9#
Intro#
Knot Resolver is a DNS caching resolver from CZ.NIC. It has a small core architecture with features implemented as optional modules and doesn't do any threading . Knot resolver is written in C and Lua(JIT) with the source code available under GPL license[https://www.gnu.org/licenses/old-licenses/gpl-1.0.txt]. [https://github.com/CZ-NIC/knot-resolver]
Prerequisites#
We assume you have a frechly installed Rocky Linux 9.
- Update and reboot the system ''' yum -y upgrade reboot '''
- Configure static IP addresses. We'll use 2001:db8::53 and 192.0.2.53 as examples.
Installation and configuration#
Install knot-resolver from the epel repository: ''' yum install epel-release yum install openldap-servers openldap openldap-clients ''' Allow OpenLDAP through firewall (ldap 389 or ldaps 689): ''' firewall-cmd --permanent --add-service=ldap firewall-cmd --reload ''' Configure Unbound: the configuration file is rather overloaded wich makes unbound highly costumizable. To make it simple, let's override the initial file and only set the most important parts. ''' vi /etc/knot-resolver/kresd.conf
net.listen('127.0.0.1', 53, { kind = 'dns' }) net.listen('::1', 53, { kind = 'dns', freebind = true }) net.listen('192.0.2.53', 53, { kind = 'dns' }) net.listen('2001:db8::53', 53, { kind = 'dns', freebind = true })
modules = { 'hints > iterate', -- Allow loading /etc/hosts or custom root hints 'stats', -- Track internal statistics 'predict', -- Prefetch expiring/frequent records }
-- Cache size cache.size = 3300 * MB
'''
Start kresd server#
systemctl enable --now kresd@1 https://knot-resolver.readthedocs.org/en/stable/