On 02/03/15 07:41, Petr Spacek wrote:
On 27.2.2015 21:04, Simo Sorce wrote:
On Fri, 2015-02-27 at 18:59 +0000, Roderick Johnstone wrote:
On 27/02/15 18:33, Simo Sorce wrote:
On Fri, 2015-02-27 at 18:19 +0000, Roderick Johnstone wrote:
I'm trying to migrate of my NIS databases to freeipa and have got to the
In NIS a typical entry is:
ipaddress canonical_name [aliases...]
but I don't see how to enter the ipaddress or aliases using the ipa
host-* commands. Is that possible?
Maybe this is supposed to be done with the ipa dns commands, but I don't
want freeipa to control the dns as we have an existing external dns
infrastructure to fit into.
How should I configure freeipa to do host lookups for aliases like NIS does?
While NIS supports hosts maps, FreeIPA strongly encourages the use of
DNS, as such we do not have direct means of providing or querying hosts
ok so I have to see how we can run the freeipa servers as dns servers
alongside the corporate servers for our domain.
I'm not sure how to proceed since I've no idea what the issues could be.
Can you give me any hints or point to any docs?
Is the problem that you cannot add entries to the corporate DNS server ?
It is recommended to have a delegation or at least forwarding between
name servers to avoid headaches.
Let me clarify it:
FreeIPA can manage DNS for you, which is easy thing to do if your corporate
policy allows that.
and then add NS and glue records to the parent zones to have proper delegation
to FreeIPA DNS servers.
DNS auto-management makes adding hosts and replicas easier but it is not
required in any way.
If you do not want to manage DNS in FreeIPA you do no have to. For aliases,
ask your DNS admin to use CNAME records to create aliases for the canonical
host name (used in ipa host-add command).
Have a nice day!
Thanks for the clarification on host aliases.
In my response to Simo I am really asking if the benefit is mainly in
the handling of replicas which is what you seem to be saying.
Manage your subscription for the Freeipa-users mailing list:
Go To http://freeipa.org for more info on the project