[Freeipa-users] Re: ipaserver.ipa.1017.abc can not serve DNS for 1017.abc

2023-08-01 Thread Alan Latteri via FreeIPA-users
Sorry, I posted the domain names wrong, but the problem still stands. If I setup FreeIPA with hostname ipaserver.ipa.1017.abc, in domain ipa.1017.abc and realm IPA.1017.ABC. Adding zone 1017.abc and adding hosts to this base domain, DNS will not be served for that domain. But any other sub

[Freeipa-users] ipaserver.ipa.1017.abc can not serve DNS for 1017.abc

2023-08-01 Thread Alan Latteri via FreeIPA-users
Hello, If I setup FreeIPA with hostname ipaserver.ipa.1017.abc, in domain ipa.example.com and realm IPA.1017.ABC. Adding zone example.com and adding hosts, DNS will not be served for that domain. But any other sub domain works fine. [root@ipa01 ~]# dig wiki.1017.abc 10.55.2.2 ; <<>> DiG

[Freeipa-users] Re: Rocky 8: how to set security-policy to FUTURE without losing FreeIPA?

2023-08-01 Thread Florence Blanc-Renaud via FreeIPA-users
Hi, On Tue, Aug 1, 2023 at 7:50 AM Harald Dunkel via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > Hi folks, > > our security scanner complains about weak ciphers in Rocky 8 > (httpd and ssh). security policy is set to "DEFAULT". If I set > it to "FUTURE", then httpd is not