scripts / FreeIPA

Commit 5df784602e4950956150a72d8e6c1007ab481248

Authored by Frederik Lindenaar
1 parent df251b1c

updated README.md to make it readable

Inline Side-by-side
Showing 1 changed file with 19 additions and 0 deletions
README.md
  View file @5df7846
... ... @@ -77,62 +77,81 @@ are implemented:
77 77 * axfr - import/synchronize a DNS zone in FreeIPA using a zone-xfer.
78 78 for example, to migrate / synchronize fromain ```domain.tld``` from DNS
79 79 server ```192.168.1.53``` without checking DNS overlap, issue the command:
  80 +
80 81 ~~~
81 82 ./freeipa-dns.py -v axfr -T 172.1.2.53 -n -f none 192.168.1.53 domain.tld
82 83 ~~~
  84 +
83 85 in addition, this will ensure zone-xfers are allowed from ```172.1.2.53```
84 86 and disable forwarding in FreeIPA.
  87 +
85 88 * copy - copy a DNS record in FreeIPA within or between zones
86 89 for example, to copy ```A``` and ```AAAA``` from host ```wwww.domain.tld```
87 90 to the domain ```domain.tld``` itself, issue the command:
  91 +
88 92 ~~~
89 93 ./freeipa-dns.py -v copy -l A AAAA wwww.domain.tld -T domain.tld
90 94 ~~~
  95 +
91 96 * move - move a DNS record in FreeIPA from one one to another
92 97 for example, to move ```host1.int``` in zone ```domain.tld``` to ```host```
93 98 in zone ```int.domain.tld``` issue the command:
  99 +
94 100 ~~~
95 101 ./freeipa-dns.py -v move -z domain.tld host.int host.int.domain.tld
96 102 ~~~
  103 +
97 104 * serial - update (set) zone serial(s) in FreeIPA, supporting both RFC1912
98 105 style serials (YYYYMMDD##) based on current date and setting the serial to
99 106 a specific value. To set the serial of a zone to revision 2 of today for
100 107 zones ```zone1.mydomain.tld``` and ```zone2.mydomain.tld```, run:
  108 +
101 109 ~~~~
102 110 ./freeipa-dns.py -v serial -t 2 zone1.mydomain.tld zone2.mydomain.tld
103 111 ~~~~
  112 +
104 113 by default this command will set the serial to a larger value (which can be
105 114 overridden with the ```-f```/```--force``` flag)
  115 +
106 116 * generate - generate number-range DNS records/attributes in FreeIPA
107 117 This is meant to generate series of hosts or attributes, for example, to
108 118 generate hosts ```dhcp-01``` to ```dhcp-10``` in zone ```int.mydomain.tld```
109 119 with ip addresses starting from ```192.168.2.100``` issue to command:
  120 +
110 121 ~~~
111 122 ./freeipa-dns.py -v generate int.mydomain.tld dhcp-%02d -4 192.168.2.100 \
112 123 --auto-increment-a -n 5
113 124 ~~~
  125 +
114 126 it can also be used to generate a farm of web servers in different subnets
115 127 with the command:
  128 +
116 129 ~~~
117 130 ./freeipa-dns.py -v generate int.mydomain.tld www -4 192.168.%d.80 -n 5
118 131 ~~~
  132 +
119 133 * reverse-ptr - create/update reverse DNS (PTR) entries in FreeIPA
120 134 With this command reverse-zones can be automatically maintained. it scans
121 135 the zones in FreeIPA for ```A``` and ```AAAA``` records and creates the
122 136 corresponding records in the ```in-addr.arpa``` and ```ip6.arpa``` zones.
123 137 The reverse zones must exist, and can also be created with this command by:
  138 +
124 139 ~~~
125 140 ./freeipa-dns.py -v reverse-ptr -n -p -c 10. 10.100 192.168 2001:0db8:85a3
126 141 ~~~
  142 +
127 143 which will create the reverse zones for prefixes 10.* 10.100.* 192.168.*
128 144 and ipv6 prefix 2001:0db8:85a3. Reverse (PTR) records will automatically be
129 145 created in the correct zone with the following command:
  146 +
130 147 ~~~
131 148 ./freeipa-dns.py -v reverse-ptr -a
132 149 ~~~
  150 +
133 151 by default, the command will not overwrite existing records, (which can be
134 152 overridden with the ```-o```/```--override``` flag). To force a PTR record
135 153 to point to a specific host, e.g. ```www.mydomain.tld``` run the command:
  154 +
136 155 ~~~
137 156 ./freeipa-dns.py -v reverse-ptr -o -z mydomain.tld -H www
138 157 ~~~
... ...