How to Configure Neverfail Heartbeat to Update BIND9 DNS Servers Deployed in a WAN
Summary
This Knowledgebase article provides information about how to configure Neverfail Heartbeat/ITCE to update BIND9 DNS servers when deployed in a WAN.
More Information
The utility NSUpdate used for updating the BIND9 DNS server must be installed on the Neverfail Heartbeat/ITCE server pair. This Knowledgebase article does not cover the installation or detail of the utility required by the vendor's DNS server. Additionally, this Knowledgebase article provides a sample script and the steps required to configure Neverfail Heartbeat to run the script.
-
Create a script that includes the following commands:
NSUPDATE "update delete $HOSTNAME A\n";
NSUPDATE "update add $HOSTNAME $TTL A $dnsip\n";
Sample script to update BIND9 DNS servers:
Note: It will be necessary to create a Transaction Signature (TSIG) to use the variable $keyfile as well as set the other variables.
chdir ($KEYDIR);
open (NSUPDATE, "| /usr/sbin/nsupdate -k $KEYFILE");
print NSUPDATE "server $NAMESERVER\n";
print NSUPDATE "update delete $HOSTNAME A\n";
if ($dnsip ne 'NO') {
print NSUPDATE "update add $HOSTNAME $TTL A $dnsip\n";
}
# print NSUPDATE "show\n";
print NSUPDATE "send\n";
close (NSUPDATE);
-
Create a Network Configuration Task via the Advanced Management Client using the steps below:
-
Launch the Advanced Management Client.
-
Click on the
Application
button.
-
Select the
Tasks
tab.
-
Click on the
User Accounts
button.
-
Click the
Add
button.
-
Enter the credentials for an account with rights to update the DNS (a member of the Administrators or Server Operators group on the target server).
-
Click
Ok
, and then
Close
.
-
Click the
Add
button to add a new task.
-
Provide a descriptive name for the 'Task' (i.e. DNSUpdate).
-
Select 'Network Configuration' for Task type.
-
Select either Primary or Secondary for the server the task should run on as appropriate.
-
In the Command field, enter the path to the previously configured script file.
-
In the 'Run As' field select the appropriate user account from the drop down and then click
Ok
.
Applies To
Neverfail Heartbeat V5.3.0 and Later
Related Information
http://www.freebsdwiki.net/index.php/BIND,_dynamic_DNS,_failover_A_records
KBID-1599