[Freeipa-users] DNS Replication Validation

Martin Basti mbasti at redhat.com
Thu Sep 24 14:53:08 UTC 2015



On 09/24/2015 04:43 PM, Rich Megginson wrote:
> On 09/24/2015 08:32 AM, Aric Wilisch wrote:
>> I need a way to validate that both the primary and the redundant 
>> FreeIPA server’s DNS zones are in sync. What’s the simplest way for 
>> me to do this?
>
> Do a DNS query to confirm that the SOA record for the primary is 
> identical to the SOA for the secondary.

SOA serials are not replicated.

You can get all  records via AXFR, and compare them per zone.

Maybe you can use python-dns to do comparation

http://www.dnspython.org/examples.html

HTH
Martin
>
>>
>> My boss won’t let me continue with an upgrade until he’s sure the 
>> primary and redundant servers have the same DNS records and are in 
>> sync. I’ve tried finding documentation on this but keep coming up blank.
>>
>> Thanks in advance.
>>
>




More information about the Freeipa-users mailing list