7.2. Configuring a DNS forward zone in the IdM Web UI

Procedure

1. Log in to the IdM Web UI with administrator privileges.
2. Click the Network Services tab.
3. Click the DNS tab.

4. In the drop down menu, click DNS Forward Zones.

   

5. Click the Add button.
6. In the Add DNS forward zone dialog box, add a zone name.
7. In the Zone forwarders item, click the Add button.
8. In the Zone forwarders field, add the IP address of the server for which you want to create the forward zone.

9. Click the Add button.

   

   The forwarded zone has been added to the DNS settings and you can verify it in the DNS Forward Zones settings. The Web UI informs you about success with the following pop-up message: DNS Forward Zone successfully added.

   注意

   After adding a forward zone to the configuration, the Web UI might display a warning about a DNSSEC validation failure.

   

   DNSSEC (Domain Name System Security Extensions) secures DNS data with a digital signature to protect DNS from attacks. This service is enabled by default in the IdM server. The warning appears because the remote DNS server does not use DNSSEC. Enable DNSSEC on the remote DNS server.

   If you cannot enable DNSSEC validation on the remote server, you can disable DNSSEC in the IdM server:

   1. Open the /etc/named/ipa-options-ext.conf file on your IdM server.

   2. Add the following DNSSEC parameters:

      dnssec-validation no;

   3. Save and close the configuration file.

   4. Restart the DNS service:

      # systemctl restart named

   Note that DNSSEC is only available as Technology Preview in IdM.