Multi server DNS credential usage

[xyntanl]

Hi,

We're trying to increase the security of the multi server setup (DNS) and are looking at a unique set of login keys to use per server instead of using the admin user login for example.

This seems to work with the following actions allowed:

• CMD_API_DNS_ADMIN
• CMD_API_DNS_CONTROL
• CMD_API_DNS_MX
• CMD_API_DNS_RESELLER
• CMD_API_LOGIN_TEST
• CMD_DNS_ADMIN
• CMD_DNS_CONTROL
• CMD_DNS_MX
• CMD_DNS_RESELLER
• CMD_LOGIN

Can we limit that even further or is there a more secure way to connect servers to another DirectAdmin server (purely for DNS zone synchronization)?

Thanks.

 

[Daniel_Dog]

I use Multi-Server also for DNS sync between servers.
If you only need DNS record sync between servers, then you only need:

• CMD_API_DNS_ADMIN
• CMD_API_LOGIN_TEST
• CMD_API_USER_EXISTS

Everything else can be set to deny.

 

[xyntanl]

I use Multi-Server also for DNS sync between servers.
If you only need DNS record sync between servers, then you only need:

• CMD_API_DNS_ADMIN
• CMD_API_LOGIN_TEST
• CMD_API_USER_EXISTS

Everything else can be set to deny.

Thanks! We'll try that.