17.9. Changing Recursive Queries Against Forwarders
The
ipa-client-install script sets a configuration statement in the /etc/named.conf file that allows name resolution against hosts that are outside the IdM DNS domain. (This requires that the IdM server be set up with DNS configured and with forwarders configured.) What this means is that any host is permitted to issue recursive queries against configured forwarders.
By default, any host is permitted to issue recursive queries against configured forwarders. The IdM installation script automatically adds a line to the
/etc/named.conf file to allow these recursive queries.
forward first;
forwarders { 10.16.36.29; };
allow-recursion { any; };
This behavior can be changed in the
allow-recursion statement.
- Open the
/etc/named.conffile. - Reset the
allow-recursionstatement. This is set toanyby default, which allows all hosts to resolve names against all forwarders.forward first; forwarders { 10.16.36.29; };allow-recursion { any; }; - Restart the
namedservice.service named restart
The name server documentation has more details on editing configuration statements.
