␡
- The Need for DNS
- Installing DNS on SLES 9
- Lab Exercise 3.1: Configuring DNS
- Advanced DNS Configuration
- Lab Exercise 3.2: Advanced DNS Configuration
- Summary
This chapter is from the book
Lab Exercise 3.2: Advanced DNS Configuration
In this lab exercise, you will use YaST to configure forwarding, DNS security, and LDAP support. To complete this exercise, you will need your lab PC system that you installed SLES 9 on in Lab Exercise 2.1 and configured in Lab Exercise 3.1.
Complete the following:
- Boot your SLES 9 server.
- Authenticate as tux with a password of SuSE789 .
- Start YaST.
- When prompted, supply a root password of tuX123 .
- Select Network Services, DNS Server.
- Configuring DNS forwarding by completing the following:
- In the left frame, select Forwarders.
- Mark Set Forwarders Manually.
- In the IP Address field, enter the IP address of your ISP's DNS server.
- Select Add.
- Configure an ACL by completing the following:
- In the left frame, select ACLs.
- In the Name field, enter allowedhosts .
- In the Value field, enter your network address and subnet mask. For example, if your network address is 192.168.1.0 and your subnet mask is 255.255.255.0, you would enter 192.168.1.0/24 .
- Select Add.
- Restrict DNS queries to hosts on your network segment by completing the following:
- In the left frame, select Basic Options.
- In the Option drop-down list, select allow-query.
- In the Value field, enter {allowedhosts; } .
- Select Add.
- Select Finish.
- Verify the changes by completing the following:
- Open a terminal session.
- Switch to your root user.
- At the shell prompt, enter cat /etc/named.conf |more .
- Verify that your changes were made.
- Configure LDAP support by completing the following:
- In YaST, select DNS Server.
- In the left frame, select Start-Up.
- Mark LDAP Support Active.
- When prompted that perl-ldap needs to be installed, select Continue.
- When prompted, insert your SLES 9 CD 3; then select Continue.
- Wait while the package is installed. (Leave your CD in the drive; we'll need it in just a minute.)
- In the DNS Server Start-Up screen, select Finish.
- When prompted for the LDAP Server password, enter tuX123 .
- To view the contents of the LDAP directory on your server, you have to install the gq client. To do this, complete the following:
- In YaST, select Software, Install and Remove Software.
- In the Search field, enter gq ; then select Search.
- Mark the gq package; then select Accept.
- Wait while the package is installed.
- Verify that your DNS zone information was imported into your LDAP directory by doing the following:
- Select N, System, GQ LDAP Client.
- Select File, Preferences.
- Select Servers.
- Select localhost, Edit.
- Select Details.
- In the Bind DN field, enter cn=Administrator,dc=cle9,dc=com .
- Select OK, OK.
- Select the Browse tab.
- Expand localhost.
- When prompted for a password, enter tuX123 .
- Expand dc=cle9,dc=com.
- Expand ou=DNS.
- Browse your zone records to verify that they were imported properly.
- Close GQ and YaST.
Congratulations! You now have a locked-down DNS server that's integrated with your LDAP directory.
That's it for this chapter. Before we go to Chapter 4, "Configuring DHCP on SLES 9," let's review what you've learned.