On 30.04.20 11:28, François Cami wrote:
Hi Ronald,
On Thu, Apr 30, 2020 at 11:15 AM Ronald Wimmer via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
>
> Hi,
>
> In the company I am working for DNS is managed by a separate department.
> Delegating the linux.mydomain.at zone is not an option. Entering DNS
> entries (for IPA servers) is done by clicking around in a web interface.
> Entries have to be entered manually one by one.
>
> An alternative would be to use nsupdate for the linux.mydomain.at zone
> (and subzones). Does IPA provide a way for using nsupdate in combination
> with all the required DNS entries upon a IPA server/replica installation?
I think, yes:
$ kinit admin
$ ipa dns-update-system-records -h
Usage: ipa [global-options] dns-update-system-records [options]
Update location and IPA server DNS records
Options:
-h, --help show this help message and exit
--dry-run Do not update records only return expected records
--all Retrieve and print all attributes from the server. Affects
command output.
--raw Print entries as stored on the server. Only affects output
format.
--out=STR file to store DNS records in nsupdate format
$ ipa dns-update-system-records --out=nsupdate
$ cat nsupdate
(...)
Wow. This was unexpected. You made my day!
Cheers,
Ronald