Search <book_title>...

Cluster Server 7.4.1 Bundled Agents Reference Guide - AIX

Last Published: 2019-02-07

Product(s): InfoScale & Storage Foundation (7.4.1)

Platform: AIX

Attributes for DNS agent

Table: Required attributes

Required attribute	Description
Domain	A string representing the DNS zone that the agent administers. The domain name can only contain alphanumeric symbols and the dash. Type and dimension: string-scalar Examples: Forward mapping: "demo.example.com" IPv4 reverse mapping: "2.168.192.in-addr.arpa"
ResRecord	ResRecord is an association of DNS resource record values. Each ResRecord attribute consists of two values: DNS record key = DNS record data. Note that the record key must be a unique value. If the resource record list contains any invalid value as a part of the record key or a record data of the ResRecord attribute, the resource reports an UNKNOWN state. Type and dimension: string-association Examples: For forward mapping, where the zone is demo.example.com: - aix901 = "192.168.2.191" - ww2 = aix901 - aix9ip6 = "2007::1:2:3:abc" For a multi-home DNS record, typically for one host with two network interfaces and different addresses, but the same DNS name. The A type ResRecord configuration should be as follows: aix902 = "192.168.2.102 10.87.13.22" A multi-home AAAA DNS record can be configured as follows: aix902 = "1234::5678 1234::AABB:CCDD" For reverse IPv4 address mapping, where the zone is 2.168.192.in-addr.arpa: 191 = "aix901.demo.example.com" For reverse IPv6 address mapping: For 2620:128:f0a2:9001::/64 IPv6 Address prefix, the reverse lookupzone will be 1.0.0.9.2.a.0.f.8.2.1.0.0.2.6.2.ip6.arpa If you want to create PTR record for 2620:128:f0a2:9001::102:108 address, you must mention 1020108 as key value in the ResRecord attribute. That is, ResRecord={1020108="aix9ip6.demo.example.com"} Use only partial host names. If you use a fully qualified domain name, append a period "." at the end of the name. For CNAME records, use: ResRecord = { www = mydesktop } or ResRecord = { www = "mydesktop.marketing.example.com." } Where the Domain attribute is "marketing.example.com"
ResRecord (Continued)	The agent uses case-insensitive pattern matching - and a combination of the Domain and ResRecord attribute values - to determine the resource record type. The RR types are as follows: PTR: if the Domain attribute ends with .arpa A: if the record data field is an IPv4 address (four sets of numbers, where a period separates each set. The following details the pattern it tries to match: [1-223].[0-255].[0-255].[0-255] Hexadecimal is not supported.) AAAA: if the record data fields are in multiple sets of hexadecimal format, then this record is an IPv6 associated type AAAA record. CNAME: for any other valid record data. Note: If a name in the ResRecord attribute does not comply with RFC 1035, then the agent logs a warning message to the engine log file. This ResRecord association is not used. As an exception to this, the DNS agent allows underscore character ("_") in hostnames. Make sure that the DNS server supports the underscore character before you configure any DNS resource records to have the underscore character in their hostnames.

Required attribute

Description

Domain

A string representing the DNS zone that the agent administers.

The domain name can only contain alphanumeric symbols and the dash.

Type and dimension: string-scalar

Examples:

Forward mapping: "demo.example.com"
IPv4 reverse mapping: "2.168.192.in-addr.arpa"

ResRecord

ResRecord is an association of DNS resource record values. Each ResRecord attribute consists of two values: DNS record key = DNS record data. Note that the record key must be a unique value.

If the resource record list contains any invalid value as a part of the record key or a record data of the ResRecord attribute, the resource reports an UNKNOWN state.

Type and dimension: string-association

Examples:

For forward mapping, where the zone is demo.example.com:
- aix901 = "192.168.2.191"
- ww2 = aix901
- aix9ip6 = "2007::1:2:3:abc"
For a multi-home DNS record, typically for one host with two network interfaces and different addresses, but the same DNS name. The A type ResRecord configuration should be as follows:
aix902 = "192.168.2.102 10.87.13.22"
A multi-home AAAA DNS record can be configured as follows:
aix902 = "1234::5678 1234::AABB:CCDD"
For reverse IPv4 address mapping, where the zone is 2.168.192.in-addr.arpa:
191 = "aix901.demo.example.com"
For reverse IPv6 address mapping:
- For 2620:128:f0a2:9001::/64 IPv6 Address prefix, the reverse lookupzone will be 1.0.0.9.2.a.0.f.8.2.1.0.0.2.6.2.ip6.arpa
- If you want to create PTR record for 2620:128:f0a2:9001::102:108 address, you must mention 1020108 as key value in the ResRecord attribute.
  That is, ResRecord={1020108="aix9ip6.demo.example.com"}

Use only partial host names. If you use a fully qualified domain name, append a period "." at the end of the name.

For CNAME records, use:

ResRecord = { www = mydesktop }
or
ResRecord = { www = "mydesktop.marketing.example.com." }
Where the Domain attribute is "marketing.example.com"

ResRecord (Continued)

The agent uses case-insensitive pattern matching - and a combination of the Domain and ResRecord attribute values - to determine the resource record type. The RR types are as follows:

PTR: if the Domain attribute ends with .arpa
A: if the record data field is an IPv4 address (four sets of numbers, where a period separates each set. The following details the pattern it tries to match: [1-223].[0-255].[0-255].[0-255] Hexadecimal is not supported.)
AAAA: if the record data fields are in multiple sets of hexadecimal format, then this record is an IPv6 associated type AAAA record.
CNAME: for any other valid record data.

Note:

If a name in the ResRecord attribute does not comply with RFC 1035, then the agent logs a warning message to the engine log file. This ResRecord association is not used. As an exception to this, the DNS agent allows underscore character ("_") in hostnames. Make sure that the DNS server supports the underscore character before you configure any DNS resource records to have the underscore character in their hostnames.

Table: Optional attributes

Optional attribute	Description
TTL	This attribute (a non-zero integer) represents the Time To Live (TTL) value, in seconds, for the DNS entries in the zone that you want to update. A lower value means more hits on your DNS server, while a higher value means more time for your clients to learn about changes. The TTL may take the value 0, which indicates never caching the record, to a maximum of 2,147,483,647, which is over 68 years! The current best practice recommendation (RFC 1912) proposes a value greater than one day, and on RRs that do not change often, consider multi-week values. Type and dimension: integer-scalar Default: 86400 Example: 3600
StealthMasters	The list of primary master name servers in the domain. This attribute is optional since the first name server is retrieved from the zone's SOA (Start of Authority) record. If the primary master name server is a stealth server, define this attribute. A stealth server is a name server that is authoritative for a zone, but does not appear in that zone's SOA record. It is hidden to prevent direct attacks from the Internet. Type and dimension: string-vector Example: {"10.190.112.23", "2620:128:f0a2:9001::102:108"}
TSIGKeyFile	Required when you configure DNS for secure updates. Specifies the absolute path to the file containing the private TSIG (Transaction Signature) key. This attribute should be configured only when the DNS server configured is a Unix based DNS server. Type and dimension: string-scalar Example: /var/tsig/example.com.+157+00000.private
CreatePTR	Use the CreatePTR attribute to direct the online agent functions to create PTR records for each RR of type A or AAAA. You must set the value of this attribute to true (1) to create the records. Before you can use this attribute, make sure that the same master or stealth servers serve the forward (A or AAAA) and reverse zones. Type and dimension: boolean-scalar Default: 0 Example: 1
OffDelRR	Use the OffDelRR attribute to direct the offline and clean agent functions to remove all records that the ResRecord key defines. You must set the value of this attribute to 1 (true) to have the agent remove all the records. Type and dimension: boolean-scalar Default: 0 Example: 1
UseGSSAPI	Use the UseGSSAPI attribute if the DNS server that you have configured is a Windows DNS server and only if it accepts secure dynamic updates. Note: Do not set this attribute if the Windows DNS server accepts non-secure updates. If this attribute is set to 1, the agent uses the -g option with the nsupdate command. See Agent notes for DNS agent. for more information on requirements to use the DNS agent with the secure Windows DNS server. Type and dimension: boolean-scalar Default: 0 Example: 1
RefreshInterval	This attribute represents the time interval in seconds after which the DNS agent attempts to refresh the resource records (RRs) on the DNS servers. The default value of zero indicates that the DNS agent does not attempt to refresh the records on the DNS servers. The DNS agent writes the warning message to the logs if it is not able to refresh the DNS records. Note: The refresh request is sent in the next monitor cycle after the RefreshInterval period is reached. If the DNS agent is unable to refresh the DNS records, and the records are removed as a result of a scavenging operation or by the DNS administrator, the DNS resource will fault. Type and dimension: integer-scalar Default: 0 Example: 3600
CleanRRKeys	Use this attribute to direct the online agent function to clean up all the existing DNS records for the configured keys before adding new records. The default value (0) disables this behavior. Note: If multiple DNS resources are configured with the same key value in their ResRecord attribute, then do not set this attribute value to 1. Type and dimension: boolean-scalar Default: 0 Example: 1