Chapter 7. Managing DNS records in IdM
This chapter describes how to manage DNS records in RHEL Identity Management (IdM). As an IdM administrator, you can add, modify and delete DNS records in IdM.
Prerequisites
Your IdM deployment contains an integrated DNS server. For information how to install IdM with integrated DNS, see one of the following links:
- You understand what types of DNS records exist in IdM.
- You understand what options are available when adding, modifying and deleting the most common DNS resource record types in IdM.
7.1. Adding DNS resource records in the IdM Web UI
Follow this procedure to add DNS resource records in the RHEL Identity Management (IdM) Web UI.
Prerequisites
- The DNS zone to which you want to add a DNS record exists and is managed by IdM. For more information about creating a DNS zone in IdM DNS, see Managing DNS zones in IdM.
- You are logged in as IdM administrator.
Procedure
-
In the IdM Web UI, click
Network Services
DNS
DNS Zones
. - Click the DNS zone to which you want to add a DNS record.
In the
DNS Resource Records
section, click to add a new record.Figure 7.1. Adding a New DNS Resource Record
Select the type of record to create and fill out the other fields as required.
Figure 7.2. Defining a New DNS Resource Record
- Click to confirm the new record.
7.2. Adding DNS resource records from the IdM CLI
Follow this procedure to add a DNS resource record of any type from the command line (CLI).
Prerequisites
- The DNS zone to which you want to add a DNS records exists. For more information about creating a DNS zone in IdM DNS, see Managing DNS zones in IdM.
- You are logged in as IdM administrator.
Procedure
To add a DNS resource record, use the
ipa dnsrecord-add
command. The command follows this syntax:ipa dnsrecord-add zone_name record_name --record_type_option=data
$ ipa dnsrecord-add zone_name record_name --record_type_option=data
Copy to Clipboard Copied! In the command above:
- The zone_name is the name of the DNS zone to which the record is being added.
- The record_name is an identifier for the new DNS resource record.
For example, to add an A type DNS record of host1 to the idm.example.com zone, enter:
ipa dnsrecord-add idm.example.com host1 --a-rec=192.168.122.123
$ ipa dnsrecord-add idm.example.com host1 --a-rec=192.168.122.123
Copy to Clipboard Copied!
7.3. Deleting DNS records in the IdM Web UI
Follow this procedure to delete DNS records in RHEL Identity Management (IdM) using the IdM Web UI.
Prerequisites
- You are logged in as IdM administrator.
Procedure
-
In the IdM Web UI, click
Network Services
DNS
DNS Zones
. - Click the zone from which you want to delete a DNS record, for example example.com..
In the
DNS Resource Records
section, click the name of the resource record.Figure 7.3. Selecting a DNS Resource Record
- Select the check box by the name of the record type to delete.
Click
Delete
.Figure 7.4. Deleting a DNS Resource Record
The selected record type is now deleted. The other configuration of the resource record is left intact.
7.4. Deleting an entire DNS record in the IdM Web UI
Follow this procedure to delete all the records for a particular resource in a zone using the RHEL Identity Management (IdM) Web UI.
Prerequisites
- You are logged in as IdM administrator.
Procedure
-
In the IdM Web UI, click
Network Services
DNS
DNS Zones
. - Click the zone from which you want to delete a DNS record, for example zone.example.com..
-
In the
DNS Resource Records
section, select the check box of the resource record to delete. Click
.Figure 7.5. Deleting an Entire Resource Record
The entire resource record is now deleted.
7.5. Deleting DNS records in the IdM CLI
Follow this procedure to remove DNS records from a zone managed by the RHEL Identity Management (IdM) DNS.
Prerequisites
- You are logged in as IdM administrator.
Procedure
To remove records from a zone, use the
ipa dnsrecord-del
command and add the--recordType-rec
option together with the record value. For example, to remove an A type record:ipa dnsrecord-del example.com www --a-rec 192.0.2.1
$ ipa dnsrecord-del example.com www --a-rec 192.0.2.1
Copy to Clipboard Copied! If you run
ipa dnsrecord-del
without any options, the command prompts for information about the record to delete. Note that passing the--del-all
option with the command removes all associated records for the zone.