On 11.2.2014 20:47, Rob Crittenden wrote:
m...@tdiehl.org wrote:

I am in the process of evaluating ipa on Centos 6.5. So far I really
like what
I see but the one problem I cannot find a viable solution for is how can
I do
internal and external views with dns stored in ipa? Google seems to
that it is not possible but I thought I would ask here to be sure.

My dns infrastructure serves different ip addresses depending on if the
request originates from the internal network or from the Internet.

In addition, internal hosts are able to do recursive look ups but for
hosts recursion is not allowed.

I am thinking that if I can add a second dns database to ipa, I could then
configure named.conf to operate using views.

Is this possible/recommended? Is there a better solution that would not be
a maintenance nightmare?


Bind views are not currently supported, see this thread

There is an upstream ticket on this as well,

Hello Tom,

we can provide you configuration file for BIND 9 which allows you to load data for external view from a file and use LDAP (with FreeIPA CLI and WebUI) for internal view (or vice versa). Let me know if you are interested in this configuration.

Could you describe your use case in detail? What are you trying to achieve, why etc.? We need to know use cases so we can design proper solution.

Would "sites" be enough for you? See

Thank you for your time!

Petr^2 Spacek

Freeipa-users mailing list

Reply via email to