freeipa/install/share/bind.zone.db.template

$$ORIGIN $DOMAIN.
$$TTL	86400
@			IN SOA	$DOMAIN. $ZONEMGR (
				01		; serial 
				3H		; refresh
				15M		; retry
				1W		; expiry
				1D )		; minimum

        		IN NS			$HOST
$HOST			IN A			$IP
;
; ldap servers
_ldap._tcp		IN SRV 0 100 389	$HOST

;kerberos realm
_kerberos		IN TXT $REALM

; kerberos servers
_kerberos._tcp		IN SRV 0 100 88		$HOST
_kerberos._udp		IN SRV 0 100 88		$HOST
_kerberos-master._tcp	IN SRV 0 100 88		$HOST
_kerberos-master._udp	IN SRV 0 100 88		$HOST
_kpasswd._tcp		IN SRV 0 100 464	$HOST
_kpasswd._udp		IN SRV 0 100 464	$HOST
$OPTIONAL_NTP

; CNAME for IPA CA replicas (used for CRL, OCSP)
$IPA_CA_RECORD
commit before pulling new dir layout misc patches to ACLs the example DNS zone and other stuff misc fixes to the krb instance current kpasswd code 2007-08-01 14:06:45 -05:00			`$$ORIGIN $DOMAIN.`
			`$$TTL 86400`
Fix: DNS installer adds invalid zonemgr email Installer adds zonemgr as relative (and invalid) address. This fix force installer to use absolute email. Ticket: https://fedorahosted.org/freeipa/ticket/4707 Reviewed-By: David Kupka <dkupka@redhat.com> 2014-11-07 05:45:43 -06:00			`@ IN SOA $DOMAIN. $ZONEMGR (`
Fix the bind zone template, or kpasswd will not work 2007-08-08 21:19:37 -05:00			`01 ; serial`
commit before pulling new dir layout misc patches to ACLs the example DNS zone and other stuff misc fixes to the krb instance current kpasswd code 2007-08-01 14:06:45 -05:00			`3H ; refresh`
			`15M ; retry`
			`1W ; expiry`
			`1D ) ; minimum`

			`IN NS $HOST`
			`$HOST IN A $IP`
			`;`
			`; ldap servers`
			`_ldap._tcp IN SRV 0 100 389 $HOST`

			`;kerberos realm`
			`_kerberos IN TXT $REALM`

			`; kerberos servers`
			`_kerberos._tcp IN SRV 0 100 88 $HOST`
			`_kerberos._udp IN SRV 0 100 88 $HOST`
			`_kerberos-master._tcp IN SRV 0 100 88 $HOST`
			`_kerberos-master._udp IN SRV 0 100 88 $HOST`
Fix the bind zone template, or kpasswd will not work 2007-08-08 21:19:37 -05:00			`_kpasswd._tcp IN SRV 0 100 464 $HOST`
			`_kpasswd._udp IN SRV 0 100 464 $HOST`
Only add an NTP SRV record if we really are setting up NTP The sample bind zone file that is generated if we don't use --setup-dns is also changed. Fixes #500238 2009-11-10 08:16:38 -06:00			`$OPTIONAL_NTP`
Add OCSP and CRL URIs to certificates Modify the default IPA CA certificate profile to include CRL and OCSP extensions which will add URIs to IPA CRL&OCSP to published certificates. Both CRL and OCSP extensions have 2 URIs, one pointing directly to the IPA CA which published the certificate and one to a new CNAME ipa-ca.$DOMAIN which was introduced as a general CNAME pointing to all IPA replicas which have CA configured. The new CNAME is added either during new IPA server/replica/CA installation or during upgrade. https://fedorahosted.org/freeipa/ticket/3074 https://fedorahosted.org/freeipa/ticket/1431 2012-11-19 09:32:28 -06:00
			`; CNAME for IPA CA replicas (used for CRL, OCSP)`
Use A/AAAA records instead of CNAME records in ipa-ca. https://fedorahosted.org/freeipa/ticket/3547 2013-04-15 05:19:11 -05:00			`$IPA_CA_RECORD`