...

<div id="google_translate_element"></div>
<script type="text/javascript">
function googleTranslateElementInit() {
  new google.translate.TranslateElement({pageLanguage: 'en'}, 'google_translate_element');
}
</script>
<script type="text/javascript" src="//translate.google.com/translate_a/element.js?cb=googleTranslateElementInit"></script>

DNS Administration 

Image RemovedImage Added

DNS Administration in DNSv3 is primarily handled under the DNS tab DNS Servers sub-tab. 

...

DNSv3 is designed to reflect RFC 1035 standards for valid data formats and will return error messaging for data not meeting those formats. 

DNSv3 Permissions

DNSv3 (6.0.0 release), restructures DNS to incorporate incorporates DNS zones and Groups into ProVision's Resource System. Zones and Groups are Resources just like Customers, Servers, Routers, or Contacts (See Resource Concepts for a more detailed explanation of Resources in ProVision).

...

Users with Admin permissions can access the DNS Servers area under the DNS tab manage DNS manage DNS server creation, edits, and deletion.

For more information on setting up permissions groups in ProVision, see Users & Permissions.

Permission Shortcut Button ("Perms")

Throughout DNS, a shortcut permissions button ("Perms") is available on a per-item level, accessible only to Admin users.

This permissions button allows for direct, point-of-use permissions adjustments to DNS Groups, Servers, Zones, and Records. It uses the same CRUD permissions and groups available in the Admin Users tab, but removes the need to remember and search for the DNS item name. 

To open the Change Resource Permissions module, click on the "Perms" Button for any DNS item. 

Image Added

Edit the CRUD permissions for any ProVision user group by clicking the checkbox for the desired group and permission type. When done, click "Save Changes". The permission changes will be also be reflected in the Admin User tab Group settings. 

Image Added

DNS Approvals

The Approvals module stores and queues DNS actions made by selected User Groups, and sends those actions to a Pending Changes list for administrative review.  Later, an administrator (or combination of administrators) can approve or reject these stored actions. 

Approvals is primarily set up and managed via the Admin Approvals Tab. See the ProVision Admin Guide - Approvals Tab for details on setting up and using Approvals from the Administrative viewpoint. 

In the DNS Tab, a "Resources Awaiting Approval" module will display near the top of DNS Groups, DNS Zone Lists, and DNS Servers pages, if a change has been submitted on that page that is pending approval. 

Image Added

Users who submitted a change for approval will see the details of their change request in this module.

Admin users with permissions to approve or reject the request will have the option to Approve or Deny the change. 

DNSv3 Administrative Tasks

Admin-only tasks in DNSv3 include setting DNS Globals, importing zones, scheduling pushes, managing DNS Servers, and managing DNS ServersApprovals. 

These tasks may be accessed in the following areas:

• DNS Global Settings (Local Installs): Admin Preferences page.
• Importing DNS Zones: the Data Import tab, see Import DNS Zones.
• Scheduling DNS Pushes: 
  • May be set up from the Scheduler or,
  • Set by server from the DNS Servers page, or 
  • Set by DNS Group from the  DNS Groups page, or
  • Set by individual zone from the View Zone page
• Managing DNS Servers: The DNS Servers page
• Approvals: The Approvals Tab.

Tasks such as working with zones, DNS Groups, adding ACLs, attaching servers to Groups, and manually pushing zones do not require ProVision Admin permissions. 

...

• Checkzone path: Path to checkzone
• rndc path: Path to rndc
• dig path: Path to dig

DNSSEC Tools:

...

• zonesigner path : Enter the zonesigner path that will be used for DNS.  Zonesigner is required if dnssec-keygen and dnssec-signzone are not set.
• dnssec-keygen path: Enter the keygen path.  Required if zonesigner is not set.
• dnssec-signzone path: Enter the signzone path. Required if zonesigner is not set.
• dnssec-dsfromkey path : Enter the dnssec-dsfromkey  path that will be used for DNS. Required in all cases.
• DNSSEC validation server: Enter the IP of the nonauthoritative DNSSEC validation nameserver. Optional.

...