Archived
1
0

updated README.md to make it readable

This commit is contained in:
2018-09-22 00:57:06 +02:00
parent df251b1c38
commit 5df784602e

View File

@@ -77,62 +77,81 @@ are implemented:
* axfr - import/synchronize a DNS zone in FreeIPA using a zone-xfer. * axfr - import/synchronize a DNS zone in FreeIPA using a zone-xfer.
for example, to migrate / synchronize fromain ```domain.tld``` from DNS for example, to migrate / synchronize fromain ```domain.tld``` from DNS
server ```192.168.1.53``` without checking DNS overlap, issue the command: server ```192.168.1.53``` without checking DNS overlap, issue the command:
~~~ ~~~
./freeipa-dns.py -v axfr -T 172.1.2.53 -n -f none 192.168.1.53 domain.tld ./freeipa-dns.py -v axfr -T 172.1.2.53 -n -f none 192.168.1.53 domain.tld
~~~ ~~~
in addition, this will ensure zone-xfers are allowed from ```172.1.2.53``` in addition, this will ensure zone-xfers are allowed from ```172.1.2.53```
and disable forwarding in FreeIPA. and disable forwarding in FreeIPA.
* copy - copy a DNS record in FreeIPA within or between zones * copy - copy a DNS record in FreeIPA within or between zones
for example, to copy ```A``` and ```AAAA``` from host ```wwww.domain.tld``` for example, to copy ```A``` and ```AAAA``` from host ```wwww.domain.tld```
to the domain ```domain.tld``` itself, issue the command: to the domain ```domain.tld``` itself, issue the command:
~~~ ~~~
./freeipa-dns.py -v copy -l A AAAA wwww.domain.tld -T domain.tld ./freeipa-dns.py -v copy -l A AAAA wwww.domain.tld -T domain.tld
~~~ ~~~
* move - move a DNS record in FreeIPA from one one to another * move - move a DNS record in FreeIPA from one one to another
for example, to move ```host1.int``` in zone ```domain.tld``` to ```host``` for example, to move ```host1.int``` in zone ```domain.tld``` to ```host```
in zone ```int.domain.tld``` issue the command: in zone ```int.domain.tld``` issue the command:
~~~ ~~~
./freeipa-dns.py -v move -z domain.tld host.int host.int.domain.tld ./freeipa-dns.py -v move -z domain.tld host.int host.int.domain.tld
~~~ ~~~
* serial - update (set) zone serial(s) in FreeIPA, supporting both RFC1912 * serial - update (set) zone serial(s) in FreeIPA, supporting both RFC1912
style serials (YYYYMMDD##) based on current date and setting the serial to style serials (YYYYMMDD##) based on current date and setting the serial to
a specific value. To set the serial of a zone to revision 2 of today for a specific value. To set the serial of a zone to revision 2 of today for
zones ```zone1.mydomain.tld``` and ```zone2.mydomain.tld```, run: zones ```zone1.mydomain.tld``` and ```zone2.mydomain.tld```, run:
~~~~ ~~~~
./freeipa-dns.py -v serial -t 2 zone1.mydomain.tld zone2.mydomain.tld ./freeipa-dns.py -v serial -t 2 zone1.mydomain.tld zone2.mydomain.tld
~~~~ ~~~~
by default this command will set the serial to a larger value (which can be by default this command will set the serial to a larger value (which can be
overridden with the ```-f```/```--force``` flag) overridden with the ```-f```/```--force``` flag)
* generate - generate number-range DNS records/attributes in FreeIPA * generate - generate number-range DNS records/attributes in FreeIPA
This is meant to generate series of hosts or attributes, for example, to This is meant to generate series of hosts or attributes, for example, to
generate hosts ```dhcp-01``` to ```dhcp-10``` in zone ```int.mydomain.tld``` generate hosts ```dhcp-01``` to ```dhcp-10``` in zone ```int.mydomain.tld```
with ip addresses starting from ```192.168.2.100``` issue to command: with ip addresses starting from ```192.168.2.100``` issue to command:
~~~ ~~~
./freeipa-dns.py -v generate int.mydomain.tld dhcp-%02d -4 192.168.2.100 \ ./freeipa-dns.py -v generate int.mydomain.tld dhcp-%02d -4 192.168.2.100 \
--auto-increment-a -n 5 --auto-increment-a -n 5
~~~ ~~~
it can also be used to generate a farm of web servers in different subnets it can also be used to generate a farm of web servers in different subnets
with the command: with the command:
~~~ ~~~
./freeipa-dns.py -v generate int.mydomain.tld www -4 192.168.%d.80 -n 5 ./freeipa-dns.py -v generate int.mydomain.tld www -4 192.168.%d.80 -n 5
~~~ ~~~
* reverse-ptr - create/update reverse DNS (PTR) entries in FreeIPA * reverse-ptr - create/update reverse DNS (PTR) entries in FreeIPA
With this command reverse-zones can be automatically maintained. it scans With this command reverse-zones can be automatically maintained. it scans
the zones in FreeIPA for ```A``` and ```AAAA``` records and creates the the zones in FreeIPA for ```A``` and ```AAAA``` records and creates the
corresponding records in the ```in-addr.arpa``` and ```ip6.arpa``` zones. corresponding records in the ```in-addr.arpa``` and ```ip6.arpa``` zones.
The reverse zones must exist, and can also be created with this command by: The reverse zones must exist, and can also be created with this command by:
~~~ ~~~
./freeipa-dns.py -v reverse-ptr -n -p -c 10. 10.100 192.168 2001:0db8:85a3 ./freeipa-dns.py -v reverse-ptr -n -p -c 10. 10.100 192.168 2001:0db8:85a3
~~~ ~~~
which will create the reverse zones for prefixes 10.* 10.100.* 192.168.* which will create the reverse zones for prefixes 10.* 10.100.* 192.168.*
and ipv6 prefix 2001:0db8:85a3. Reverse (PTR) records will automatically be and ipv6 prefix 2001:0db8:85a3. Reverse (PTR) records will automatically be
created in the correct zone with the following command: created in the correct zone with the following command:
~~~ ~~~
./freeipa-dns.py -v reverse-ptr -a ./freeipa-dns.py -v reverse-ptr -a
~~~ ~~~
by default, the command will not overwrite existing records, (which can be by default, the command will not overwrite existing records, (which can be
overridden with the ```-o```/```--override``` flag). To force a PTR record overridden with the ```-o```/```--override``` flag). To force a PTR record
to point to a specific host, e.g. ```www.mydomain.tld``` run the command: to point to a specific host, e.g. ```www.mydomain.tld``` run the command:
~~~ ~~~
./freeipa-dns.py -v reverse-ptr -o -z mydomain.tld -H www ./freeipa-dns.py -v reverse-ptr -o -z mydomain.tld -H www
~~~ ~~~