Chapter 28. Installing DNS on an existing IdM server
Follow this procedure to install the DNS service on an Identity Management (IdM) server that was originally installed without it.
- You understand the advantages and limitations of using IdM with integrated DNS as described in Installing an IdM server: With integrated DNS, with an integrated CA as the root CA.
rootaccess to the IdM server.
[Optional] Verify that DNS is not already installed on the IdM server.
[root@r8server ~]# ipa server-role-show r8server.idm.example.com Role name: DNS server Server name: r8server.idm.example.com Role name: DNS server Role status: absent
The output confirms that IdM DNS is not available on the server.
[root@r8server ~]# yum module enable idm:DL1
ipa-dns-serverpackage and its dependencies:
[root@r8server ~]# yum module install idm:DL1/dns
Start the script to install DNS on the server:
[root@r8server ~]# ipa-dns-install
The script prompts for per-server DNS forwarders.
Do you want to configure DNS forwarders? [yes]:
To configure per-server DNS forwarders, enter
yes, and then follow the instructions on the command line. The installation process will add the forwarder IP addresses to the IdM LDAP.
For the forwarding policy default settings, see the
--forward-policydescription in the ipa-dns-install(1) man page.
- For the forwarding policy default settings, see the
If you do not want to use DNS forwarding, enter
With no DNS forwarders, hosts in your IdM domain will not be able to resolve names from other, internal, DNS domains in your infrastructure. The hosts will only be left with public DNS servers to resolve their DNS queries.
The script prompts to check if any DNS reverse (PTR) records for the IP addresses associated with the server need to be configured.
Do you want to search for missing reverse zones? [yes]:
If you run the search and missing reverse zones are discovered, the script asks you whether to create the reverse zones along with the PTR records.
Do you want to create reverse zone for IP 192.0.2.1 [yes]: Please specify the reverse zone name [2.0.192.in-addr.arpa.]: Using reverse zone(s) 2.0.192.in-addr.arpa.Note
Using IdM to manage reverse zones is optional. You can use an external DNS service for this purpose instead.