{"id":368,"date":"2021-07-14T17:19:00","date_gmt":"2021-07-14T17:19:00","guid":{"rendered":"https:\/\/www.geekmungus.co.uk\/?p=368"},"modified":"2022-11-05T10:53:18","modified_gmt":"2022-11-05T10:53:18","slug":"dell-openmanage-dns-records-for-server-initiated-discovery-with-microsoft-dns","status":"publish","type":"post","link":"https:\/\/geekmungus.co.uk\/?p=368","title":{"rendered":"Dell Openmanage DNS Records for Server Initiated Discovery (with Microsoft DNS)"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">OpenManage Enterprise version 3.4 allows automatic discovery of servers that have iDRAC firmware version 4.00.00.00 or later. The appliance can be configured to allow these servers to automatically locate the console by querying the DNS and initiate their discovery.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/www.dell.com\/support\/manuals\/en-uk\/dell-openmanage-enterprise\/ome-3.4_ug\/discover-servers-automatically-by-using-the-server-initiated-discovery-feature?guid=guid-23bd252f-9651-410a-88de-3f332d748b55\">instructions <\/a>(<a href=\"https:\/\/www.dell.com\/community\/Dell-OpenManage-Enterprise\/Server-initiated-discovery\/m-p\/7822286#M3732\">and this<\/a>) give the use of the TUI or manual creation for Dell Openmanage that appears to be Bind format using nsupdate to create the records, so runes are given for how to do this on Microsoft DNS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now in my case we have a pretty non-standard DNS configuration i&#8217;m not sure how much of an affect this would have if you just had plain Microsoft DNS (Active Directory Enabled) running, and certainly Bind appears it would be straight forward; but I&#8217;d thought i&#8217;d post this just in case as it was a bit odd and might help someone else out!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I&#8217;ve substituted in internal.turnip.co.uk instead of the real domain name by the way.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We have an InfoBlox that is authoritative for the <strong>internal.turnip.co.uk<\/strong> domain (and Microsoft DNS on the domain controllers is not, this is very much non-standard from a Microsoft point of view), then certain Active Directory enabled\/relevant subdomains of <strong>internal.turnip.co.uk<\/strong>, e.g. <strong>_msdcs.internal.turnip.co.uk<\/strong>, <strong>_sites.internal.turnip.co.uk<\/strong> and so on, are delegated down to the Microsoft DNS Name Servers running on the Domain Controllers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So in our case because we don&#8217;t have the root of the <strong>internal.turnip.co.uk<\/strong> domain where Microsoft DNS is authoritative and the <strong>_tcp.internal.turnip.co.uk<\/strong> has been delegated to the Microsoft DNS servers running on the Active Directory domain controllers. We can&#8217;t create the PTR, TXT or SRV records for the delegated domain <strong>_tcp.internal.turnip.co.u<\/strong>k on the InfoBlox, this needs to be created on the Microsoft DNS server directly which is authoritative for the sub-domain and this is where the GUI appears to be lacking to allow you to enter the sub-domain as you create the record, it appears pinned to wherever you are creating it at.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Dell documentation says you need to create these 3 records for Openmanage clients to be able to auto-discover:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>_dcimprovsrv._tcp.&lt;domain&gt; 3600 PTR ptr.dcimprovsrv._tcp.&lt;domain&gt;\n \nptr.dcimprovsrv._tcp.&lt;domain&gt; 3600 TXT URI=\/api\/DiscoveryConfigService\u200b\/Actions\/DiscoveryConfigService.\u200bSignalNodePresence\n \nptr.dcimprovsrv._tcp.&lt;domain&gt; 3600 SRV 0 0 443 &lt;hostname&gt;.&lt;domain&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">In our case though this would be:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>_dcimprovsrv._tcp.internal.turnip.co.uk 3600 PTR ptr.dcimprovsrv._tcp.turnip.co.uk\n \nptr.dcimprovsrv._tcp.internal.turnip.co.uk 3600 TXT URI=\/api\/DiscoveryConfigService\u200b\/Actions\/DiscoveryConfigService.\u200bSignalNodePresence\n \nptr.dcimprovsrv._tcp.internal.turnip.co.uk 3600 SRV 0 0 443 openmanage-01.internal.turnip.co.uk<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Dell Openmanage &#8211; PTR Record<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So the first record is a PTR record, we create a PTR record in <strong>DNS Manager<\/strong> under the <strong>_tcp.internal.turnip.co.uk<\/strong> zone, where the IP address is actually put in as a hostname as shown in the dialogue.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/www.geekmungus.co.uk\/wp-content\/uploads\/2021\/07\/image-52.png\" alt=\"\" class=\"wp-image-371\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Once created it appears like this:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/www.geekmungus.co.uk\/wp-content\/uploads\/2021\/07\/image-53.png\" alt=\"\" class=\"wp-image-372\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Dell Openmanage &#8211; TXT Record<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The second record is a TXT record and is actually pretty normal, so again in DNS Manager under the <strong>_tcp.internal.turnip.co.uk<\/strong> zone, we right click create &#8220;Other Records&#8221; then select TXT and complete the dialogue as shown:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/www.geekmungus.co.uk\/wp-content\/uploads\/2021\/07\/image-54.png\" alt=\"\" class=\"wp-image-373\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Now here is where it gets a little weirder, we now get a folder under the zone because the .dcimprovsrv is specified as a sub-domain by the looks of it.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/www.geekmungus.co.uk\/wp-content\/uploads\/2021\/07\/image-55-1024x166.png\" alt=\"\" class=\"wp-image-374\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"C291561DellOpenmanageDNSRecordsforServerInitiatedDiscovery-DellOpenmanage-SRVRecord\"><strong>Dell Openmanage &#8211; SRV Record<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The final record is where things get very much more odd, basically we need to create an SRV record the issue is we need to create it at the <strong>ptr.dcimprovsrv._tcp.internal.turnip.co.uk<\/strong> sub-domain, now the DNS Manager GUI doesn&#8217;t let you edit the Domain field when you are creating the record (and if you are creating it at the sub-domain level which we have to in this case, because we can&#8217;t create at the root domain internal.turnip.co.uk because the Microsoft DNS is not authoritative for this part of the domain).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Therefore we need to create using the CLI, in theory you can do this in PowerShell as well, but here it is in DNSCMD.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>dnscmd . \/RecordAdd \"_tcp.internal.turnip.co.uk\" \"ptr.dcimprovsrv\" SRV 0 0 443 \"openmanage-01.internal.turnip.co.uk\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">And there it is, created alongside the TXT record.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/www.geekmungus.co.uk\/wp-content\/uploads\/2021\/07\/image-56-1024x221.png\" alt=\"\" class=\"wp-image-377\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"C291561DellOpenmanageDNSRecordsforServerInitiatedDiscovery-TestResults\"><strong>Test Results<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"C291561DellOpenmanageDNSRecordsforServerInitiatedDiscovery-TestResults\">The proof is in the DNS lookups, so here are the results for each in order, all appears to be in order, in this case we are querying the InfoBlox DNS servers, which have the relevant <strong>_tcp.internal.turnip.co.uk<\/strong> DNS delegation configured, i.e. what any normal client would do that was using DNS to lookup these records, as you can see they appear to be as expected.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Microsoft Windows &#91;Version 10.0.18363.1646]\n(c) 2019 Microsoft Corporation. All rights reserved.\n \nC:\\WINDOWS\\system32&gt;nslookup -type=ptr _dcimprovsrv._tcp.internal.turnip.co.uk\nServer:  intdns1.internal.turnip.co.uk\nAddress:  1.2.3.4\n \nNon-authoritative answer:\n_dcimprovsrv._tcp.internal.turnip.co.uk name = ptr.dcimprovsrv._tcp.internal.turnip.co.uk\n \nC:\\WINDOWS\\system32&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">The TXT record.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>C:\\WINDOWS\\system32&gt;nslookup -type=txt ptr.dcimprovsrv._tcp.internal.turnip.co.uk\nServer:  intdns1.internal.turnip.co.uk\nAddress:  1.2.3.4\n \nNon-authoritative answer:\nptr.dcimprovsrv._tcp.internal.turnip.co.uk     text =\n \n        \"URI=\/api\/DiscoveryConfigService\/Actions\/DiscoveryConfigService.SignalNodePresence\"\n \nC:\\WINDOWS\\system32&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">And finally the SRV record.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>C:\\WINDOWS\\system32&gt;nslookup -type=srv ptr.dcimprovsrv._tcp.internal.turnip.co.uk\nServer:  intdns1.internal.turnip.co.uk\nAddress:  1.2.3.4\n \nNon-authoritative answer:\nptr.dcimprovsrv._tcp.internal.turnip.co.uk    SRV service location:\n          priority       = 0\n          weight         = 0\n          port           = 443\n          svr hostname   = openmanage-01.internal.turnip.co.uk\n \nC:\\WINDOWS\\system32&gt;<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/www.dell.com\/support\/manuals\/en-uk\/dell-openmanage-enterprise\/ome-3.4_ug\/discover-servers-automatically-by-using-the-server-initiated-discovery-feature?guid=guid-23bd252f-9651-410a-88de-3f332d748b55\">https:\/\/www.dell.com\/support\/manuals\/en-uk\/dell-openmanage-enterprise\/ome-3.4_ug\/discover-servers-automatically-by-using-the-server-initiated-discovery-feature?guid=guid-23bd252f-9651-410a-88de-3f332d748b55<\/a><\/li><li><a href=\"https:\/\/www.dell.com\/community\/Dell-OpenManage-Enterprise\/Server-initiated-discovery\/m-p\/7822286#M3732\">https:\/\/www.dell.com\/community\/Dell-OpenManage-Enterprise\/Server-initiated-discovery\/m-p\/7822286#M3732<\/a><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/unsplash.com\/@timmossholder\" data-type=\"URL\" data-id=\"https:\/\/unsplash.com\/@timmossholder\" target=\"_blank\" rel=\"noreferrer noopener\">Image Attribution<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>OpenManage Enterprise version 3.4 allows automatic discovery of servers that have iDRAC firmware version 4.00.00.00 or later. The appliance can be configured to allow these servers to automatically locate the console by querying the DNS and initiate their discovery. The instructions (and this) give the use of the TUI or manual creation for Dell Openmanage &#8230; <a title=\"Dell Openmanage DNS Records for Server Initiated Discovery (with Microsoft DNS)\" class=\"read-more\" href=\"https:\/\/geekmungus.co.uk\/?p=368\" aria-label=\"Read more about Dell Openmanage DNS Records for Server Initiated Discovery (with Microsoft DNS)\">Read more<\/a><\/p>\n","protected":false},"author":4,"featured_media":382,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,14,20],"tags":[],"class_list":["post-368","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dns","category-microsoft-windows","category-random"],"_links":{"self":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/368","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=368"}],"version-history":[{"count":1,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/368\/revisions"}],"predecessor-version":[{"id":1369,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/368\/revisions\/1369"}],"wp:attachment":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=368"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=368"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=368"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}