Hello, On Mon, Jun 22, 2026 at 7:22 PM Kris C via FreeIPA-users < [email protected]> wrote: > > I have a client that lives in the DNS domain happyplace.org. My corporate overlords want to attach their network to mine. I need to be able to resolve their hosts on eviloverlords.com. In FreeIPA I configured eviloverlords.com in the DNS forward zones. I have two ip address that their requests should be forwarded to 6.6.6.1 and 6.6.6.2, and the policy is set to forward only. I am able to resolve eviloverlords.com from the FreeIPA servers, I am unable to resolve them from the clients. > > From an happyplace.org host, if I do an nslookup and specifically request a dns entry from 6.6.6.1 or 6.6.6.2, I am able to resolve them. I am unable to resolve the host if I just do a nslookup boss.eviloverlords.com. I'm running FreeIPA 4.9.13. Why is my IdM server not serving up the records for eviloverlords.com? >
Many things can be in place, and is hard to find without some more information. Check the forward policy on dns configuration, on the IPA (happyplace.org) DNS servers. and on the forward zones. (Hint: dnsconfig-showt, dnsverver-show, dnsforwardzone-find) You may also look into named logs at /var/named/data/* (I'd start with query.log and query_error.log, if available). Rafael > Domain names and ip address have been changed to protect the innocent and FreeIPA version I'm using isn't exactly Free (hint hint) ;-) > -- > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedorahosted.org/archives/list/[email protected] > Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new -- Rafael Guterres Jeffman Senior Software Engineer FreeIPA - Red Hat
-- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
