options {
	// Put files that named is allowed to write in the data/ directory:
	directory "/var/named"; // the default
	dump-file               "data/cache_dump.db";
	statistics-file         "data/named_stats.txt";
	memstatistics-file      "data/named_mem_stats.txt";

        /* Not used yet, support only on very recent bind versions */
#       tkey-gssapi-credential "DNS/$FQDN";
#       tkey-domain "$REALM";
};

logging {
/*      If you want to enable debugging, eg. using the 'rndc trace' command,
 *      By default, SELinux policy does not allow named to modify the /var/named directory,
 *      so put the default debug log file in data/ :
 */
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
	type hint;
	file "named.ca";
};

include "/etc/named.rfc1912.zones";

dynamic-db "ipa" {
	library "ldap.so";
	arg "uri ldap://$FQDN";
	arg "base cn=dns, $SUFFIX";
	arg "auth_method none";
};