NAME

       ipa-dns-install - Add DNS as a service to an IPA server

SYNOPSIS

       ipa-dns-install [OPTION]...

DESCRIPTION

       Adds DNS as an IPA-managed service. This requires that the IPA server is already installed
       and configured.

OPTIONS

       -d, --debug
              Enable debug logging when more verbose output is needed

       --ip-address=IP_ADDRESS
              The IP address of the IPA server. If not provided then this is determined based  on
              the hostname of the server.  This this option can be used multiple times to specify
              more IP addresses of the server (e.g. multihomed and/or dualstacked server).

       --forwarder=FORWARDER
              A forwarder is a DNS server where queries for a specific non-resolvable address can
              be directed. To define multiple forwarders use multiple instances of --forwarder

       --no-forwarders
              Do  not  add  any  DNS  forwarders,  send  non-resolvable addresses to the DNS root
              servers.

       --auto-forwarders
              Add DNS forwarders configured in /etc/resolv.conf to the list of forwarders used by
              IPA DNS.

       --reverse-zone=REVERSE_ZONE
              The  reverse  DNS  zone  to  use. This option can be used multiple times to specify
              multiple reverse zones.

       --no-reverse
              Do not create new reverse DNS zone. If used on a replica and  a  reverse  DNS  zone
              already exists for the subnet, it will be used.

       --auto-reverse
              Try  to  resolve  reverse  records and reverse zones for server IP addresses and if
              neither is resolvable creates these reverse zones.

       --no-dnssec-validation
              Disable DNSSEC validation on this server.

       --dnssec-master
              Setup server to be DNSSEC key master.

       --disable-dnssec-master
              Disable the DNSSEC master on this server.

       --kasp-db=KASP_DB
              Copy OpenDNSSEC metadata from the specified kasp.db file. This will  not  create  a
              new kasp.db file.

       --zonemgr
              The e-mail address of the DNS zone manager. Defaults to hostmaster@DOMAIN

       --allow-zone-overlap
              Allow  creatin of (reverse) zone even if the zone is already resolvable. Using this
              option is discouraged as it result in later problems with domain name resolution.

       -U, --unattended
              An unattended installation that will never prompt for user input

DEPRECATED OPTIONS

       -p DM_PASSWORD, --ds-password=DM_PASSWORD
              The password to be used by the Directory Server for the Directory Manager user

EXIT STATUS

       0 if the installation was successful

       1 if an error occurred