RedHat/FreeRadius

RedHat10/SambaAd

01- Synoptic	02- SambaAD	03- PdnsRecursor	04- Settings
05- Maintenance	06- Selinux	07- GnomeShell
FreeRadius	DaloRadius	OpenLdap

3. Pdns-Recursor.

Warning
Tuesday, November 18, 2025, pdns-recursor does not exist in the epel 10 repositories.
I use the version 5.3.

PowerDNS Recursor is a highly efficient,
low-latency DNS caching server that guarantees the right web site
or other online resource is returned in response
to your subscribers' DNS requests as quickly as possible.

3.1 Principle.

I am using pdns-recursor to do the redirect.
Operation:
Pdns-recursor responds to all dns requests on port 4343.
These requests are redirect to another dns server.

3.2 Installation.

Download pdns-recursor-5.
cd /tmp
wget https://repo.powerdns.com/centos/x86_64/10/rec-53/pdns-recursor-5.3.0-1pdns.el10.x86_64.rpm
Install dependencies.
dnf install boost-context boost-filesystem net-snmp-agent-libs libsodium luajit
Install the package.
rpm -ivh pdns-recursor-5.3.0-1pdns.el10.x86_64.rpm

3.3 Pdns-recursor.

Warning
The configuration file has changed.
It is in the form of yaml.
It is possible to convert an old recursor.conf configuration file with the command "rec_control show-yaml recursor.conf".

mv /etc/pdns-recursor/recursor.conf /etc/pdns-recursor/recursor.conf_ori
vi /etc/pdns-recursor/recursor.conf

incoming:  
# local-address IP addresses to listen on  
  listen:  
  - 127.0.0.1  
# local-port   port to listen on  
  port: 4343  
recursor:  
  forward_zones_recurse:  
  - zone: .  
    recurse: true  
    forwarders:  
    - 1.1.1.1  
# This is the default on older versions of pdns-recursor.  
  security_poll_suffix: ''  
  setgid: pdns-recursor  
  setuid: pdns-recursor  
# Validation result: OK  
# End of converted recursor.conf  
# This configuration was converted from the recursor.conf file in pdns-recursor 4.8.9.  
# The script is :  
#  rec_control show-yaml recursor.conf  

systemctl enable --now pdns-recursor

3.4 Modify samba.

Edit smb.conf to change the DNS redirector.
vi /etc/samba/smb.conf

      dns forwarder = 127.0.0.1:4343  

systemctl restart samba

nslookup thot.dw.learn.lan

Server:         127.0.0.1  
Address:        127.0.0.1#53  
  
Name:   thot.dw.learn.lan  
Address: 192.168.40.47  

nslookup google.fr

Server:         127.0.0.1  
Address:        127.0.0.1#53  
  
Non-authoritative answer:  
Name:   google.fr  
Address: 142.250.179.99  
Name:   google.fr  
Address: 2a00:1450:4007:808::2003