Re: [Freeipa-users] DNS: Possible to set a CNAME for bare domain?

2014-10-06 Thread Petr Spacek
Hello, I will add few more details: "ALIAS" virtual record and its derivatives are not standardized yet and AFAIK there is no implementation which works with DNSSEC. IPA uses BIND 9.9 as DNS backend and BINDitself doesn't support any variant of ALIAS record at the moment. As a result, IPA do

Re: [Freeipa-users] DNS: Possible to set a CNAME for bare domain?

2014-10-04 Thread Will Sheldon
Thanks Michael, it seems you are correct. I knew I’d seen it done though - turns out that if you use route53 for your DNS amazon has a way of making it work with a virtual record type called an alias. I guess we’ll just have to use route53. At least alias lookups are free. On October 4, 2014 a

Re: [Freeipa-users] DNS: Possible to set a CNAME for bare domain?

2014-10-04 Thread Michael Lasevich
You cannot have cname for a bare domain in IPA or in any DNS service, it violates DNS rfc's. On Oct 4, 2014 10:19 AM, "Will Sheldon" wrote: > > Hello everyone : ) > > > Is it possible to configure a CNAME for a bare domain with freeIPA? > > We would like to move our site over to an Amazon ELB, bu

[Freeipa-users] DNS: Possible to set a CNAME for bare domain?

2014-10-04 Thread Will Sheldon
Hello everyone : ) Is it possible to configure a CNAME for a bare domain with freeIPA?  We would like to move our site over to an Amazon ELB, but to do so we have to point our domain (foo.com, not www.foo.com) at an was A record with a CNAME (something like .eu-west-1.elb.amazonaw