Hello,

it looks that replica is trying to add records to your forward zone. What
is the hostname of the replica?

1. what is not working on lxc?

2018-01-07 12:20 GMT+01:00 Alex Corcoles via FreeIPA-users <
freeipa-users@lists.fedorahosted.org>:

> Hi,
>
> I'm labbing a FreeIPA environment for personal use, and I'm getting that
> while bringing up a replica.
>
> I set up my first freeipa-server instance on a cheap VPS on a public IP,
> intend on making it publicly accessible so I can always authenticate my
> laptop even on wild public networks.
>
> I'm adding the replica as a VM(1) on a Proxmox VE, on a private network
> with VPN connectivity to the first public freeipa-server, but I'm getting:
>
> 2018-01-06T20:56:04Z DEBUG The ipa-replica-install command failed,
> exception: ValidationError: invalid 'dnszoneidnsname': only master zones
> can contain records
>
> . I'm trying to create the replica with CA and DNS, and I had set up DNS
> forwarding to the internal DNS on the Proxmox system with:
>
> $ ipa dnsforwardzone-add h2.int.pdp7.net --forwarder=10.42.42.1
> $ ipa dnsforwardzone-add --name-from-ip=10.42.42.0/24
> --forwarder=10.42.42.1 --forward-policy=only
>
> on the first server (I run dnsmasq on Proxmox VE, 10.42.42.0/24 -
> h2.int.pdp7.net is the network it manages), and I guess that's messing
> with the replica, but I'm not sure how to troubleshoot this.
>
> Thoughts? Ideas?
>
> Thanks,
>
> Álex
>
> (1) I can't seem to create a freeipa-replica on an LXC container. Is this
> something that can be discussed here or should I take it to LXC?
>
> --
>    ___
>  {~._.~}
>   ( Y )
>  ()~*~()  mail: alex at corcoles dot net
>  (_)-(_)  http://alex.corcoles.net/
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
>
>


-- 
S pozdravom Martin Bašti.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to