You should add your IPA zone as a slave on your 'external' DNS servers so they 
are able to resolve the IPA zone.


[] On Behalf Of Winfried de Heiden
Sent: Monday, May 18, 2015 10:10 AM
To: Freeipa-users
Subject: [Freeipa-users] AD-trust and external DNS

Hi all,

Creating an AD-trust works nicely. However, for some customers both AD and IPA 
don't have have DNS "for their own", the use external DNS (Infoblox for example)

Now, is is possible to create an AD trust without a build-in (bind) IPA-DNS?



Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to