Chapter 109. Checking DNS records using IdM Healthcheck

Prerequisites

• You must perform Healthcheck tests as the root user.

Procedure

• To run the DNS records check, enter:

  # ipa-healthcheck --source ipahealthcheck.ipa.idns

  If the record is resolvable, the test returns SUCCESS as a result:

  {
      "source": "ipahealthcheck.ipa.idns",
      "check": "IPADNSSystemRecordsCheck",
      "result": "SUCCESS",
      "uuid": "eb7a3b68-f6b2-4631-af01-798cac0eb018",
      "when": "20200415143339Z",
      "duration": "0.210471",
      "kw": {
        "key": "_ldap._tcp.idm.example.com.:server1.idm.example.com."
      }
  }

  The test returns a WARNING when, for example, the number of records does not match the expected number:

  {
      "source": "ipahealthcheck.ipa.idns",
      "check": "IPADNSSystemRecordsCheck",
      "result": "WARNING",
      "uuid": "972b7782-1616-48e0-bd5c-49a80c257895",
      "when": "20200409100614Z",
      "duration": "0.203049",
      "kw": {
        "msg": "Got {count} ipa-ca A records, expected {expected}",
        "count": 2,
        "expected": 1
      }
  }