I am trying to set up a small office of software developers with FreeIPA.
My ipa-server-install fails with "DNS zone example.com. already exists in
DNS and is handled by servers foo1.myisp.net...".

We do have basic hosted dns for our few public facing servers but I want to
run an internal DNS on the LAN (and on the OpenVPN) to do name resolution.
We don't currently have any AD or Kerberos, this is basically a new company
with just a few people and a few workstations and will probably never grow
very large without massive infrastructure changes that would be way out of
scope for what I am trying to do.

I was going to set up the internal computers as
workstation1.internal.mycompany.com, workstation2.internal.mycompany.com,
etc. since my understanding is that I can't do it without a subdomain since
the primary domain DNS server already exists.

I am putting this on a new server with a fresh install of CentOS 8. The ipa
server is ipa.mycompany.com, or is it supposed to be
ipa.internal.mycompany.com?  I was trying to use all the defaults when
calling ipa-server-install --setup-dns, but I don't really understand where
to tell it about the subdomain.

None of the many tutorials I have read seem to deal with my use case even
though it seems like something lots of people would want to do.  Am I using
the right tool for this job?  Am I just not finding the right web page that
makes it easy?

Can I run a small network with about 10 hosts and about 10 users on one
freeipa host?  I also have a separate box for pfsense/openvpn and maybe I
could run a failover dns server on that, but I can't even get the main
server running.

Thanks in advance for any help with this.
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to