ipa-dns-install (1) - Linux Manuals

ipa-dns-install: Add DNS as a service to an IPA server

NAME

ipa-dns-install - Add DNS as a service to an IPA server

SYNOPSIS

ipa-dns-install [OPTION]...

DESCRIPTION

Adds DNS as an IPA-managed service. This requires that the IPA server is already installed and configured.

OPTIONS

-d, --debug

Enable debug logging when more verbose output is needed

--ip-address=IP_ADDRESS

The IP address of the IPA server. If not provided then this is determined based on the hostname of the server. This this option can be used multiple times to specify more IP addresses of the server (e.g. multihomed and/or dualstacked server).

--forwarder=FORWARDER

A forwarder is a DNS server where queries for a specific non-resolvable address can be directed. To define multiple forwarders use multiple instances of --forwarder

--no-forwarders

Do not add any DNS forwarders, send non-resolvable addresses to the DNS root servers.

--auto-forwarders

Add DNS forwarders configured in /etc/resolv.conf to the list of forwarders used by IPA DNS.

--forward-policy=first|only

DNS forwarding policy for global forwarders specified using other options. Defaults to first if no IP address belonging to a private or reserved ranges is detected on local interfaces (RFC 6303). Defaults to only if a private IP address is detected.

--reverse-zone=REVERSE_ZONE

The reverse DNS zone to use. This option can be used multiple times to specify multiple reverse zones.

--no-reverse

Do not create new reverse DNS zone. If used on a replica and a reverse DNS zone already exists for the subnet, it will be used.

--auto-reverse

Try to resolve reverse records and reverse zones for server IP addresses and if neither is resolvable creates these reverse zones.

--no-dnssec-validation

Disable DNSSEC validation on this server.

--dnssec-master

Setup server to be DNSSEC key master.

--disable-dnssec-master

Disable the DNSSEC master on this server.

--kasp-db=KASP_DB

Copy OpenDNSSEC metadata from the specified kasp.db file. This will not create a new kasp.db file.

--zonemgr

The e-mail address of the DNS zone manager. Defaults to hostmaster [at] DOMAIN

--allow-zone-overlap

Allow creatin of (reverse) zone even if the zone is already resolvable. Using this option is discouraged as it result in later problems with domain name resolution.

-U, --unattended

An unattended installation that will never prompt for user input

DEPRECATED OPTIONS

-p DM_PASSWORD, --ds-password=DM_PASSWORD

The password to be used by the Directory Server for the Directory Manager user

EXIT STATUS

0 if the installation was successful

1 if an error occurred