Jay Fenlason via FreeIPA-users wrote:
> When attempting to debug another problem with FreeIPA, I noticed
> something odd:
> 
> If I have an IPA domain example.com, I can do an ipa-client-install
> from a machine named c.d.example.com and it successfully adds the
> client to the domain and updates IPA's DNS, but if I do an ipa
> host-add of c.d.example.com it gives an error saying
> ipa: ERROR: DNS zone d.example.com. not found
> which is correct, inasmuch as I never created a d.example.com zone.
> But ipa-client-install happily added c.d to the example.com zone.  So
> which of these two commands is doing the right thing?

ipa-client-install, via ipa-join, creates the host using the non-cli API
call join rather than host-add directly. join calls host-add with
--force so DNS checks are skipped.

The client, as you point out, by default will try to add the DNS records
itself in a later step, so it is not enforced up front.

rob
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to