[Freeipa-users] DNS configuration

2014-12-02 Thread Matthew Herzog
I just realized that my IPA servers cannot resolve ANY servers in my domain. What do I need to do to fix this? Below is my named.conf. options { // turns on IPv6 for port 53, IPv4 is on by default for all ifaces listen-on-v6 {any;}; // Put files that named is allowed to

Re: [Freeipa-users] DNS configuration

2014-12-02 Thread Matthew Herzog
at 11:36 AM, Martin Basti mba...@redhat.com wrote: On 02/12/14 17:28, Matthew Herzog wrote: I just realized that my IPA servers cannot resolve ANY servers in my domain. What do I need to do to fix this? Below is my named.conf. options { // turns on IPv6 for port 53, IPv4

Re: [Freeipa-users] DNS configuration

2014-12-02 Thread Matthew Herzog
pspa...@redhat.com wrote: On 2.12.2014 17:36, Martin Basti wrote: On 02/12/14 17:28, Matthew Herzog wrote: I just realized that my IPA servers cannot resolve ANY servers in my domain. What do I need to do to fix this? Below is my named.conf. options { // turns on IPv6 for port

Re: [Freeipa-users] DNS configuration

2014-12-07 Thread Matthew Herzog
So should the FreeIPA server be authoritative for the Kerb. realm/DNS domain or can it/should it be a slave DNS server instead? Or caching only? On Sun, Dec 7, 2014 at 9:57 PM, Dmitri Pal d...@redhat.com wrote: On 12/07/2014 09:51 PM, Matthew Herzog wrote: What must be done in or on the ipa

Re: [Freeipa-users] DNS configuration

2014-12-08 Thread Matthew Herzog
at 2:56 AM, Petr Spacek pspa...@redhat.com wrote: On 8.12.2014 05:02, Dmitri Pal wrote: On 12/07/2014 10:10 PM, Matthew Herzog wrote: So should the FreeIPA server be authoritative for the Kerb. realm/DNS domain or can it/should it be a slave DNS server instead? Or caching only? IPA DNS

Re: [Freeipa-users] DNS configuration

2014-12-08 Thread Matthew Herzog
My Linux/LDAP domain is lnx.e-bozo.com. The AD domain is ad.e-bozo.com. This has always been the case. I set up my FreeIPA server in the lnx.e-bozo.com domain using realm LNX.E-BOZO.COM. In light of this, how should I proceed? On Mon, Dec 8, 2014 at 9:48 AM, Simo Sorce s...@redhat.com wrote: On

Re: [Freeipa-users] DNS configuration

2014-12-08 Thread Matthew Herzog
] (0x0010): sss_process_init() failed On Mon, Dec 8, 2014 at 11:48 AM, Matthew Herzog matthew.her...@gmail.com wrote: I have never seen my IPA servers produce a zone file nor has the install script ever mentioned the creation of such. In fact, I just ran ipa-server-install --uninstall ipa-server

Re: [Freeipa-users] DNS configuration

2014-12-08 Thread Matthew Herzog
OK, I found the generated zoe file in /tmp and it looks sane. Should I add those lines of config to our DNS servers? On Mon, Dec 8, 2014 at 2:10 PM, Matthew Herzog matthew.her...@gmail.com wrote: Here are some errors I'm seeing on the client. tail -f sssd_lnx.e-bozo.com.log (Mon Dec 8 14:03

Re: [Freeipa-users] DNS configuration

2014-12-08 Thread Matthew Herzog
server's web interface. Error in the GUI is, E-BOZO.COM\Domain Users: invalid 'truster domain object': no trusted domain matched the specified flat name. On Mon, Dec 8, 2014 at 2:49 PM, Matthew Herzog matthew.her...@gmail.com wrote: sssd_hostname.log (Mon Dec 8 14:46:54 2014) [sssd[be[bo3.e

Re: [Freeipa-users] DNS configuration

2014-12-08 Thread Matthew Herzog
Also, I just realized the AD I'm trying to connect to is of type Windows 2000. Yay! On Mon, Dec 8, 2014 at 5:54 PM, Matthew Herzog matthew.her...@gmail.com wrote: OK, I deserve a slap. I had forgotten to set up the two-way trust again since the ipa-server-install --uninstall reinstall. That's