Hello,

I'm struggling to setup a new replica.
I am now wondering if the DNS configuration is good, especially the reverse
DNS.

When I run ipa-replica, from the host, using the name server from the
freeIPA master, I get:
ipa         : DEBUG    Check forward/reverse DNS resolution
ipa         : DEBUG    Search DNS server ipa.quartzbio.com (['10.9.70.6',
'10.9.70.6', '10.9.70.6']) for ipa.quartzbio.com
ipa         : DEBUG    Check reverse address 10.9.70.6 (ipa.quartzbio.com)
ipa         : DEBUG    Check failed: NXDOMAIN The DNS query name does not
exist: 6.70.9.10.in-addr.arpa.
ipa         : ERROR    Reverse DNS resolution of address 10.9.70.6 (
ipa.quartzbio.com) failed. Clients may not function properly. Please check
your DNS setup. (Note that this check queries IPA DNS directly and ignores
/etc/hosts.)


The master freeIPA servers is ipa.quartzbio.com at 10.9.70.6
Looking at the DNS config using the web UI, in the DNS Zone
70.9.10.in-addr.arpa., there is one entry (name="", type=NS, data=
ipa.quartzbio.com), but no record with name=6.
If I type "host 10.9.70.6" from any IPA-enrolled computer, I get

%host 10.9.70.6
Host 6.70.9.10.in-addr.arpa. not found: 3(NXDOMAIN)

I tried adding a new entry: (name="6", type=PTR, data=ipa.quartzbio.com),
but now I get:
%host 10.9.70.6
6.70.9.10.in-addr.arpa domain name pointer
ipa.quartzbio.com.70.9.10.in-addr.arpa.

and ipa-replica-install now fails with:
DEBUG    The ipa-replica-install command failed, exception:
HostLookupError: The host name ipa.quartzbio.com does not match the primary
host name ipa.quartzbio.com.70.9.10.in-addr.arpa. Please check /etc/hosts
or DNS name resolution
ERROR    The host name ipa.quartzbio.com does not match the primary host
name ipa.quartzbio.com.70.9.10.in-addr.arpa. Please check /etc/hosts or DNS
name resolution

So: How do I fix my reverse DNS configuration ? How should it look like ?

Thanks.
Karl
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to