8.2. Configuring DNS in Identity Management

DNS can be configured as part of the IPA server installation, simply by using the --setup-dns option. If DNS is not configured then, it can be configured later using the ipa-dns-install command. For example:

ipa-dns-install -p secret --ip-address=1.2.34.56 --no-forwarders --zone-refresh=60

-p gives the password for the Directory Manager user in the 389 Directory Server. All of the DNS entries are stored in the LDAP directory, so this directory must be accessed to add the DNS configuration.
--ip-address gives the IP address for the master DNS server.
--no-forwarders means that there are no forwarders used with the DNS service, only root servers. Alternatively, a comma-separated list of forwarders can be given, using the --forwarder option.
Reverse DNS is configured automatically. It is possible to disable reverse DNS by using the --no-reverse option.
The IPA server can actively check to see when new DNS zones are added and to update its DNS server accordingly. If no value is explicitly given, the zone refresh period is 30 seconds. The refresh interval can be set to another value using the --zone-refresh option, which sets the polling interval in seconds.