This section provides information about configuring DNS objects and importing and exporting database information using the iManager utility.
For better performance results with the iManager utility, particularly in a distributed DNS/DHCP setup, you should configure the DNS/DHCP scope settings for the session before you proceed with other administrative tasks.
If you do not configure the DNS/DHCP scope settings for the session, you receive a warning before every task you attempt to perform indicating that the scope settings are not set. However, you can still proceed with the task.
Setting the scope of the DNS/DHCP services requires two specifications for the session: the Novell® eDirectory™ context of the Locator object and the administrative scope of the session. Specifying the eDirectory context of the Locator object at the start of the session significantly improves performance because it eliminates the need to search for the Locator object. Specifying the administrative scope of the session also improves performance significantly because it restricts the retrieval of DNS/DHCP objects for viewing to the scope you specify.
When you configure the DNS/DHCP scope settings for a session, they only last as long as the session lasts. If you start a new session, you must configure the DNS/DHCP scope settings again.
IMPORTANT:If you configure DNS/DHCP scope settings for a session for either DNS or DHCP, the settings apply across the session to both roles.
To configure DNS/DHCP scope settings:
Click
or to open the DNS/DHCP Scope Settings window.Specify the eDirectory context of the DNS/DHCP Locator object or browse to select it.
Specify the eDirectory context of the container object that will provide the administrative scope of the current session.
If you specify only the eDirectory context of the DNS/DHCP Locator object and not the administrative scope of the current session, you can proceed with administrative tasks without receiving a warning message. However, performance is further optimized if you also define the administrative scope.
Click
.Click
to configure the scope settings again.A message indicates that the scope request was successful.
Ensure that you have met the following prerequisites prior to setting up DNS:
Install NetWare 6.5 on the selected servers.
Install Novell iManager.
Install Internet Explorer 5.5 Support Pack 2, or Internet Explorer 6.0 on a Windows client.
The DNS Server Management role consists of the following tasks:
Use the iManager utility to create and set up a DNS server object for each DNS server you plan to operate.
Click
to open the DNS Server Management window in the main panel.From the drop-down menu, select
and click to open the Create DNS Server window.Type the NCP™ server name or browse to select an NCP server from the eDirectory tree.
Specify a unique hostname for the DNS server object.
Specify a domain name for the server object.
Click
.A message indicates that the new DNS server was created.
After you create a DNS server object, you can modify its configuration parameters.
Click
to open the DNS Server Management window in the main panel.From the drop-down menu, select
and click to open the View/Modify Server window.Select the DNS Server from the drop-down list, then click
.You are led through a set of steps that allow you to view and modify the following DNS server configuration parameters:
List of Zones: Lists the names of the zones that the server manages along with the roles of this server for each of the zones. This field cannot be edited.
DNS Server IP Address: Contains the IP addresses on which the DNS server listens for queries. This field cannot be edited.
DNS Server Domain name: Lists the domain name of the DNS server.
DNS Server Comments: You can add your comments about the DNS server in this box. This parameter is optional.
Forward List: Specifies a list of IP addresses of DNS servers to which unresolved queries will be forwarded.
To add servers to the
, click , specify the IP address of the server, then click again.To remove servers from the
select the IP address of the server from the Forward List, then click .No-Forward List: Specifies a list of domain names whose unresolved queries will not be forwarded to other DNS servers.
To add domain names to the
, click , specify the domain name of the server, then click .To remove domain names from the No-
, select the domain name from the , then click .First: Controls the behavior of queries for which the server is not authoritative and the answers do not exist in the cache. Values can be either
or . The default is . If you specify the value as , the server queries the forwarders list first and, if the answer is not found, the server will searches for the answer.Only: Controls the behavior of queries for which the server is not authoritative and the answers do not exist in the cache. Values can be either
or . If you specify the value as , the server queries only the forwarders list.Events Log: Specifies the degree of event data the server should collect. Major or critical events denote a significant change in the state of server processing. To configure the event log, select from the following options:
None: Turns off event logging (default)
Major Events: Logs only the critical events
All: Logs both major and minor events
Audit Log: Select
to log audit trails and events.SNMP Traps Option: SNMP traps are generated for various events depending on the configuration for this option.
You can select from the following options:
None: Turns off the SNMP traps generation (default)
Major Events: Generates SNMP traps only for critical events
All: Generates SNMP traps for both major and minor events
Allow Recursion: Specifies a list of IP addresses or networks that can submit recursive DNS queries. If you want to disable recursion, specify a value of None.
To add the address match list element:
Click
Specify the
and the .The
is optional.If you want to add a generic option, check the
to select from the available options in the drop-down list.Click
.To delete the address match list element, select the item to be deleted, then click .
Query Filter: Specifies a list of IP addresses or networks that are authorized to query the DNS server. If no IP address is specified, queries are allowed from all hosts.
To add the address match list element:
Click
Specify the
and the .The
is optional.If you want to add a generic option, check the
to select from the available options in the drop-down list.Click
.To delete the address match list element, select the item to be deleted, then click .
Zone Out Filter: Specifies a list of IP addresses or networks that are authorized to perform zone transfer from the DNS server.
To add the address match list element:
Click
Specify the
and the .The
is optional.If you want to add a generic option, select the
to select from the available options in the drop-down list.Click
.To delete the address match list element, select the item to be deleted, then click .
Also Notify: Specifies a list of IP addresses of name servers that receive Notify messages, when a fresh copy of the zone is loaded.
To add the IP address, Click , specify the
, then click .To delete the IP address, select the
you want to delete, then click .Blacklist Server: Specifies a list of IP addresses of servers that are not approved. The DNS server does not answer queries from or forward queries to the servers listed.
To add the IP address, click , specify the
, then click .To delete the IP address, select the
you want to delete, then click .Maximum Cache Size: Specifies the maximum amount of memory in kilobytes that the server can use as cache.
Maximum Recursion Lookups: Specifies the maximum number of simultaneous recursive lookups the server performs on behalf of the clients.
Current set of Additional Options: Specifies the additional global server and zone options. To view the options, click
to open the View/Modify Server window.To add an available additional option, select the option and click
.To add all available additional options, click
.To remove an available additional option, select the option and click
.To remove all available additional options, click
.To delete all option names in the list, click the top-level check box, then click
.To remove one or more option names, click the check box next to it, then click
.Click
to open the DNS Server Management window in the main panel.From the drop-down menu, select
and click to open the Delete DNS Server window.To remove all DNS servers in the list, click the top-level check box and click
.To remove one or more DNS servers, click the check box next to it and click
.The DNS server (named.nlm) must be loaded before you can start or stop the server activity.
The Start/Stop service can be used to load zone data along with the modified configuration without unloading and reloading the DNS server. When you stop the DNS server using this option, it is still loaded in the memory. However, no services are provided. You can use the iManager Management utility or the Java-Based Management Console to update the zone data. When you restart the DNS server by using this option, the server is reconfigured with the new configuration settings and the zone data is also reloaded.
This option can also be used to remotely start and stop the DNS server.
Click
to open the DNS Server Management window in the main panel.From the drop-down menu, select
and click to open the Start/Stop Server window.Select the DNS server.
Click
.Depending on the state of the DNS server module, one of the following appears:
Failure notification message: This appears if the DNS server module (named.nlm) is not loaded. In order to start the server, load the DNS server module through the system console.
Start button: If the DNS server module is loaded but is in Stop mode, click the button to start the DNS server.
Stop button: If the DNS server module is loaded but is in Start mode, click the button to stop the DNS server.
Click
to open the DNS Server Management window in the main panel.From the drop-down menu, select
and then click to open the Load/Unload Server window.Select the DNS server and specify the port number that the DNS server is configured on.
The port is required to check whether the DNS Server is running or not. By default, port 53 is used if no other port number is specified.
Click
.Depending on the state and the version of the DNS Server, one of the following appears:
If the NLM™ is not loaded on the machine, you are prompted to load named.
Based on the DNS Server version that is selected, the supported command line options are displayed. Enter the command line options to load the NLM with, then click
.If the NLM is already loaded on the machine, you are prompted to unload named. To unload the NLM, click Unload.
Click
to complete the task.When you click Load or Unload, the corresponding command is sent to the server. The success status in iManager indicates only that the command was issued to the server. This does not necessarily mean that the command execution was successful.
This task enables you to move DNS Services from one NCP server to another NCP server. You can also convert a DNS server into a cluster-enabled DNS server by moving it to a virtual NCP server.
This feature is supported for DNS servers running on NetWare 6.5 or later.
To move a DNS server:
Click
to open the DNS Server Management window in the main panel.From the drop-down menu, select
and click to open the Move DNS Server window.Select the DNS Server name from the drop-down list.
DNS servers prior to NetWare 6.5 are not available in this list.
Specify the name of the NCP Server that the DNS Services will be moved to or use the
icon to browse and select it.Click
.To configure a DNS server to audit activities:
Click
to open the DNS Server Management window in the main panel.From the drop-down menu, select
and click to open the View/Modify Server window.Select the DNS Server from the drop-down menu.
Click
.Click
three times, then select or under Event Log.Click the
check box.Click
.Click
.To view the audit trail log, csatpxy.nlm must be running on the server.
Click
to open the DNS Server Management window in the main panel.From the drop-down menu, select
and click to open the DNS Audit Trail Log window.Select the server from the DNS Server drop-down menu.
If you want to filter the
, modify the starting and ending dates in the appropriate fields.The following date format is accepted:
Click
.This opens the DNS Audit Trail Log table, which lists the following data:
Entry Time: Date and time the event occurred
Type: Type of event
IP Address: IP address at which the event occurred
Domain Name: Domain Name at which the event occurred
To define a view filter on the Audit Trail Log, click the
button.You can now filter events on the following parameters:
Start Date: Sets a start date for monitoring the DNS audit trail.
End Date: Sets an end date for monitoring the DNS audit trail.
Agent Ready: The SNMP (Simple Network Mail Protocol) agent is ready to receive or transmit requests.
Query Received: The DNS server acknowledges the receipt of a query by making an entry in the log file.
Query Forwarded: The DNS server forwards a query to a client or from another DNS server.
Response Received: The DNS server responds to a query from a client or another DNS server.
Click
to open the DNS Server Management window in the main panel.From the drop-down menu, select
and click to open the DNS Audit Trail Log window, then click .Click the
link, then save the audit trail log file on your local machine.To view the event log, csatpxy must be running on the server.
Click
to open the DNS Server Management window in the main panel.From the drop-down menu, select
and click to open the DNS Event - Events Log window.Select the server from the DNS Server drop-down menu.
If you want to filter the
, modify the start and end dates in the appropriate fields.The following date format is accepted:
mm-dd-yyyy
Click
.This opens the DNS Event Log table, which lists the following data:
Entry Time: Date and time the event occurred
Severity: Severity of the event - critical, major, warning, and informational
State: State of the server - operational, degraded, and inoperative
Description: Description of the event that occurred
To define a view filter on the DNS Event Log, click the
button.You can now filter events on the following parameters:
Start and end date settings regulate the time recorded by the event logger.
Severity options define which event levels are recorded: critical, major, warning, and informational.
State settings define the condition of events recorded: operational, degraded, and inoperative.
Click
to open the DNS Server Management window in the main panel.From the drop-down menu, select
and click to open the DNS Event - Events Log window, then click .Click the
link, then save the Event Log file on your local machine.The DNS Zone object is an eDirectory container object that comprises Resource Record Set (RRSet) objects and resource records.
Click
to open the Zone Management window in the main panel.From the drop-down menu, select
and click to open the Create DNS Zone window.Select
.Specify the
for the zone or browse to select it.Specify a name for the zone object.
Under the
, select (default).Select a DNS server from the
drop-down menu.or
Specify a unique hostname in the
box and, optionally, select a domain from the Domain drop-down menu.Click
.Click
.A message indicates that the new primary zone has been created.
Click
to open the Zone Management window in the main panel.From the drop-down menu, select
, then click to open the Create DNS Zone window.Select
.Specify the
for the zone or browse to select it.Specify a name for the zone object.
Under the
, select Secondary.Specify the
of the DNS server that will provide zone out transfers for this secondary zone.Select a DNS server from the
drop-down menu. This parameter is optional.or
Specify a unique hostname in the
box and, optionally, select a domain from the drop-down menu, then click .Click
.A message indicates that the new secondary zone has been created.
Click
to open the Zone Management window in the main panel.From the drop-down menu, select
, then click to open the Create DNS Zone window.Select
.Specify the
for the zone or browse to select it.Specify a name for the zone object.
Under the
, select .Select a DNS server from the
drop-down menu. This parameter is optional.or
Specify a unique hostname in the
box and, optionally, select a domain from the drop-down menu, then click OK.Click
.A message indicates that the new forward zone has been created.
Click
to open the Zone Management window in the main panel.From the drop-down menu, select
and click to open the Create DNS Zone window.Select
.Specify the
for the zone or browse to select it.Specify the network address of the zone in the
field.For example, specify 143.72.155 only for 155.72.143.IN-ADDR.ARPA.
The IN-ADDR.ARPA zone name is displayed in the
field.Under the
, select (default).Select a DNS server from the
drop-down menu.or
Specify a unique hostname in the
box and, optionally, specify a domain name or select it from the drop-down menu.Click
.A message indicates that the new Primary IN-ADDR.ARPA Zone object has been created.
Click
to open the Zone Management window in the main panel.From the drop-down menu, select
, then click to open the Create DNS Zone window.Select
.Specify the
for the zone or browse to select it.Specify the network address in the
field.The IN-ADDR.ARPA zone name is displayed in the
field.Under the
, select .Select a DNS server from the
drop-down menu.or
Specify a unique hostname in the
box and, optionally, specify a domain name or select it from the drop-down menu.Type the IP address of the DNS server that will provide zone-out transfers for this secondary zone.
Click
.A message indicates that the new Secondary IN-ADDR.ARPA Zone object has been created.
Click
to open the Zone Management window in the main panel.From the drop-down menu, select
, then click to open the Create DNS Zone window.Select
.Specify the
for the zone or browse to select it.Specify the network address in the
field.The IN-ADDR.ARPA zone name is displayed in the
field.Under the Zone Type, select
.Select a DNS server from the
drop-down menu.or
Specify a unique hostname in the
box, then click and select a domain name from the pop-up window.Click
.A message indicates that the new Secondary IN-ADDR.ARPA Zone object has been created.
After you have created a Zone object, you can modify it and provide more detailed configuration information.
Click
to open the Zone Management window in the main panel.From the drop-down menu, select
and click to open the View/Modify Zone window.Select the
object from the drop-down menu.Click
.You can now modify the following DNS Zone configuration parameters:
Zone Type: Specifies whether the zone is a primary, secondary, or forward zone.
NOTE:It is not possible to change the zone type from primary/secondary to forward and vice versa
Zone Master IP Address: If the zone type is secondary, specify the IP address of the master server for this zone.
Forwarder: Controls the behavior of queries for which the server is not authoritative and the answers do not exist in the cache. Values can be either
or . The default is . If you specify the value as the server queries the forwarders list first, and if the answer is not found, the server searches for the answer. If you specify the value as , the server queries only the forwarders list.Available DNS Servers: Lists the available DNS Servers that are not assigned to this zone. Authoritative DNS Servers: Lists all authoritative servers for this zone.
Add All: Select this option to assign all available DNS servers to a zone.
Remove All: Select this option to remove all authoritative DNS servers from a zone.
Designated DNS Server: The DNS Server selected in this field acts as a designated primary or designated secondary server depending on whether the zone type is primary or secondary.
Comments: You can provide information about the zone in this field. This parameter is optional.
Forward List: Specifies a list of DNS servers to which unresolved queries are sent.
Modify Zone Out Filter: Specifies a list of IP addresses or networks authorized to perform zone transfers for this zone from the DNS server managing it.
Zone Master: Specifies the domain name of the master DNS Server.
E-mail Address: Specifies the e-mail address (with “@” replaced by “.”) of the person responsible for this zone.
Serial Number: Use this field to set a version number for the Start of Authority.
Interval values: Select from the following values:
Refresh: Specifies the time in which the secondary name server transfers a copy of the zone data to the primary name server. The default is 180 minutes.
Retry: Specifies the time that a secondary name server waits after a transfer has failed and before it tries to download the zone database again. The default is 60 minutes.
Expire: Specifies the time after which a secondary name server will be unable to download a zone database. The default is 168 hours.
Minimal TTL: Specifies the minimum TTL for a resource record. This parameter determines the period for which a DNS server retains an address mapping in the cache. The default is 24 hours.
Click
to open the Zone Management window in the main panel.From the drop-down menu, select
and click to open the Delete DNS Zone window.Select the
that are to be deleted.To delete all the Zone objects in the list, click the top-level check box.
Click
Select the zones whose sub-zones are to be deleted.
To delete all the sub-zone objects in the list, click the top-level check box.
Click
.Click
to open the Zone Management window in the main panel.From the drop-down menu, select
and click to open the Import DNS Zone window.Click
to select the context where the zone object must be created.Select a target DNS server distinguished name.
This server subsequently manages the zone data.
Under the
, select either Primary (default) or Secondary.If you select Secondary as the Zone type, specify the IP address of the zone.
Specify or browse to select the
location.Click
.If the import operation encounters any problems, you can view the error details by downloading the log file. Also, if any of the resource records are ignored because of this problem, you can create them by using the task Creating Resource Records.
NOTE:Importing a Forward Zone is not supported
Click
to open the Zone Management window in the main panel.From the drop-down menu, select
and click to open the Export DNS Zone window.From the drop-down menu, select the
to which the file will be exported.Click
.Click the
link to open the dialog box.Select
, then click .Specify the name of the file or browse to select it, then click
.Click
.NOTE:Exporting a Forward Zone is not supported
An RRSet object represents an individual domain name within a DNS zone. Each RRSet object has one or more resource records beneath it that contain additional information about the domain.
The most common resource records are Address (A) records, which map a domain name to an IP address, and Pointer (PTR) records, which map an IP address to a domain name within an IN-ADDR.ARPA zone.
Creation, modification, or updating of Resource records is not supported for a Forward Zone
The Resource Record Management role consists of the following tasks:
A resource record is a piece of information about a domain name. Each resource record contains information about a particular piece of data within the domain.
To create a new resource record:
Click
to open the Resource Record Management window in the main panel.From the drop-down menu, select
and click to open the Create Resource Record window.From the drop-down menu, select the domain name where the resource record is to be created, then click
.Resource records cannot be created in a secondary zone.
Specify the owner name under which you want to create the resource record or click the Object Selector icon to search for an existing owner name.
If the owner name is not specified, the resource record is created under "@".
From the
drop-down menu, select the from the available options and specify the appropriate resource record data corresponding to the type chosen.Click
.Click
after the resource record is created.Click
to automatically increment the serial number and complete the task.For more information on Resource Record Types, see Section A.2, Types of Resource Records.
NOTE:Start of Authority (SOA) is defined as part of a Zone object’s attributes. A Pointer (PTR) record is created automatically when any new A resource record is created and if a primary IN-ADDR.ARPA zone exists to which the IP address belongs. Similarly, an A type resource record is created when any new PTR record is created and if a primary zone exists to which the domain name pointed by PTR record belongs.
Click
to open the Resource Record Management window in the main panel.Select
from the drop-down menu and click to open the Modify RRSet - Resource Record window.From the
drop-down menu, select the domain that contains the host or RRSet.Resource records cannot be created in a secondary zone.
Specify or search to select the values for the following fields:
, , and .To use the search feature to select these values:
Click the
icon to open the Object Selector window.Select the
from the drop-down menu, select the number of search results to be displayed per page, click , then click the hostname.This automatically fills in the
, , and fields.Click
to modify the resource record data.Modify the resource record data for all but the following types of resource records:
A (or IPv4)AAAA (or ntwk_ipv6_nw)A6
PTR
Enter new comments or modify existing comments for the resource record data.
Click
to save the changes.You can delete one, more than one, or all resource records and RRSets, by using the multi-select deletion feature in the iManager utility.
Click
to open the Resource Record Management window in the main panel.From the drop-down menu, select
and click to open the Delete RRSet - Resource Record window.From the
drop-down menu, select the domain that contains the host or RRSet.Resource records cannot be created in a secondary zone.
Delete either the entire RRSet or one or more resource records in the RRSet.
To search for RRSets by owner name, specify the name of the RRSet owner.
Select the RRSet option from the
drop-down menu.Click
to list the available RRSets that match the specified owner name.To delete all RRSets listed, click the top-level check box and click
. To delete one or more RRSets, click the corresponding check boxes and click .Delete one or more resource records:
To search for a resource record by owner name, specify the name of the Resource Record owner.
Select Resource record from the
drop-down menu.Select the resource record type from the
drop-down menu.Click
to list the available resource records that match the specified owner name.To delete all resource records listed, click the top-level check box and click . To delete one or more resource records, click the corresponding check boxes and click .NOTE:When the A and PTR type resource records are deleted, the corresponding PTR and A resource records are also deleted.