Oh... I meant to also mention... If you want to have a service authenticate both inside and outside your network, that particular service will need to have the same FQDN on both the inside and the outside of the network... Since they aren't likely to share the same IP address (Public vs Private), you MAY need to get very clever about your "Split Horizon DNS," Google for more details.
On Tue, Jun 19, 2018, 13:35 Galen Seitz <[email protected]> wrote: > On 06/19/2018 12:33 PM, Tyrell Jentink wrote:> > > The second is FreeIPA, lives at 10.42.1.10 and it serves the > lin.example.com > > subdomain and the 1.42.10.arpa reverse domain. It has a conditional > > forwarder to forward requests under win.example.com to 10.42.2.10 > > Some questions for you: > > What is the FQDN of your ipa server? > > Are you using DHCP for client machines? If so, where is it hosted and > how does it interact with your DNS server? > > > thanks, > galen > -- > Galen Seitz > [email protected] > _______________________________________________ > PLUG mailing list > [email protected] > http://lists.pdxlinux.org/mailman/listinfo/plug > _______________________________________________ PLUG mailing list [email protected] http://lists.pdxlinux.org/mailman/listinfo/plug
