Attributes

Required attributes

Required attribute

Description

Domain 

A string representing the DNS zone that the agent administers. 

The domain name can only contain alphanumeric symbols and the dash. 

Type and dimension: string-scalar 

Examples:  

  • Forward mapping
    "demo.example.com"
  • IPv4 reverse mapping
    "2.168.192.in-addr.arpa"

 

ResRecord 

ResRecord is an association of DNS resource record values. Each ResRecord attribute consists of two values: DNS record key = DNS record data. Note that the record key must be a unique value. 

If the resource record list contains any invalid value as a part of the record key or a record value of the ResRecord attribute, the resource enters an unknown state. 

Type and dimension: association-scalar 

Examples: 

  • For forward mapping, where the zone is demo.example.com:

    - sles901 = "192.168.2.191"

    - ww2 = sles901

    - sles9ip6 = "2007::1:2:3:abc"

  • A multi-home DNS record, typically for one host with two network interfaces, different address, but the same DNS name. This results in two-A records, or a single A record with continuation lines.

    sle902 = "192.168.2.102 10.87.13.22"

    A multi-home AAAA DNS record can be configured as below:

    sle902 = "1234::5678 1234::AABB:CCDD"

  • For reverse IPv4 address mapping, where the zone is 2.168.192.in-addr.arpa:

    191 = "sles901.demo.example.com"

  • For reverse IPv6 address mapping, where the zone is 3.0.0.0.2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.0.0.2.ip6.arpa:

    cba = "sles9ip6.demo.example.com"

Use only partial host names. If you use a fully qualified domain name, append a period "." at the end of the name. 

For CNAME records, use: 

  • ResRecord = { www = mydesktop }

    or

  • ResRecord = { www = "mydesktop.marketing.example.com." }

    Where the Domain attribute is "marketing.example.com"

Required attributes

Required attribute

Description

ResRecord (cont.) 

The agent uses case-insensitive pattern matching—and a combination of the Domain and ResRecord attribute values—to determine the resource record type. The RR type is as follows: 

  • PTR: if the Domain attribute ends with .arpa
  • A: if the record data field is four sets of numbers, where a space separates each set. The following details the pattern it tries to match: [1-223].[0-255].[0-255].[0-255]

    Hexadecimal is not supported.

  • AAAA: if the record data fields are in multiple sets of hexadecimal format, then this record is an IPv6 associated type AAAA record.
  • CNAME: for any other valid record data.

    Note   If a name in the ResRecord attribute does not comply with RFC 1035, then a warning is issued to the log file. The ResRecord association is not used.

Optional attributes

Optional attribute

Description

TTL 

A non-zero integer represents the "Time To Live" value, in seconds, for the DNS entries in the zone that you want to update. 

A lower value means more hits on your DNS server, while a higher value means more time for your clients to learn about changes. 

The time-in-seconds value may take the value 0, which indicates never caching the record, to a maximum of 2,147,483,647, which is over 68 years! The current best practice recommendation (RFC 1912) proposes a value greater than one day, and on RRs that do not change often, consider multi-week values. 

Type and dimension: integer-scalar 

Default: 86400 

Example: "3600"  

 

StealthMasters 

The list of primary master name servers in the domain. 

This attribute is optional since the first name server is retrieved from the zone's SOA (Start of Authority) record. 

If the primary master name server is a stealth server, define this attribute. A stealth server is a name server that is authoritative for a zone, but does not appear in that zone's SOA record. It is hidden to prevent direct attacks from the Internet. 

Type and dimension: string-keylist 

Example: { "10.190.112.23" } 

 

TSIGKeyFile 

Required when you configure DNS for secure updates. Specifies the absolute path to the file containing the private TSIG (Transaction Signature) key. 

Type and dimension: string-scalar  

Example: 

/var/tsig/example.com.+157+00000.private 

CreatePTR 

Use the CreatePTR attribute to direct the online agent function to create PTR records for each RR of type A or AAAA. You must set the value of this attribute to true (1) to create the records. Before you can use this attribute, the same master or stealth servers must serve the forward (A or AAAA) and reverse zones. 

Type and dimension: boolean-scalar 

Default: 0 

Example: 1 

 

OffDelRR 

Use the OffDelRR attribute to direct the offline agent function to remove all records that the ResRecord key defines. You must set the value of this attribute to true (1) to have the agent remove all the records. 

The online agent function always adds records if they do not exist. 

Type and dimension: boolean-scalar 

Default: 0 

Example: 1