Opera DNS UI
A tool to manage a PowerDNS authoritative server in a corporate LDAP-driven environment.
- Connects to PowerDNS via its JSON API.
- Allows login managed by LDAP server.
- Create zones; add, edit and delete records.
- Grant multiple users access to administer a zone.
- Lower access level that allows to view a zone and request changes.
- Provides its own JSON API for making changes to DNS records.
- Keeps a changelog of all DNS changes done through it.
- (Optionally) export all zones as bind-format zone files and store changes in git.
The current version is only compatible with PowerDNS 4.1.0 and higher.
PowerDNS 4.1 has not been released yet. You can use a build from master as long as it has at least the following fix:
As another alternative, you can use PowerDNS 3 with Opera DNS UI v0.1.
- Apache 2.2 or higher
- PHP 5.6 or higher
- PHP intl (Internationalization Functions) extension
- PHP JSON extension
- PHP LDAP extension
- PHP PDO_PGSQL extension
- PostgreSQL database
- PowerDNS authoritative server (>= 4.1.0)
webserver=yes webserver-address=... webserver-allow-from=... webserver-port=... api=yes api-key=...
Clone this repo to somewhere outside of your default Apache document root.
Create a postgresql user and database.
createuser -P dnsui-user createdb -O dnsui-user dnsui-db
Import the database schema from
psql -U dnsui-user dnsui-db < schema.sql
Add the following directives to your Apache configuration (eg. virtual host config):
DocumentRoot /path/to/dnsui/public_html DirectoryIndex init.php FallbackResource /init.php
Set up authnz_ldap for your virtual host (or any other authentication module that will pass on an Auth-user variable to the application).
Copy the file
config/config.iniand edit the settings as required.
scripts/ldap_update.phpto run on a regular cron job.
Anyone in the LDAP group defined under
config/config.ini will be able to add and modify all zones.
They will also be able to grant access under "User access" for any zone to any number of users.
Copyright 2013-2017 Opera Software
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.