Re: [Freeipa-users] DNS forwarding configuration randomly breaks and stops working

2015-10-07 Thread Petr Spacek
On 6.10.2015 18:57, nat...@nathanpeters.com wrote: >> Your expectation #1 is correct, but there can be multiple reasons why it >> fails. >> >> Did you try to set forward policy = only as I advised you in the previous >> e-mail? Forward policy 'first' does not make sense when split-DNS is >> involve

Re: [Freeipa-users] DNS forwarding configuration randomly breaks and stops working

2015-10-06 Thread nathan
> Your expectation #1 is correct, but there can be multiple reasons why it > fails. > > Did you try to set forward policy = only as I advised you in the previous > e-mail? Forward policy 'first' does not make sense when split-DNS is > involved > because you can end up with mixture of records from d

Re: [Freeipa-users] DNS forwarding configuration randomly breaks and stops working

2015-10-06 Thread Petr Spacek
On 5.10.2015 21:57, nat...@nathanpeters.com wrote: Looking at the log entries, it appears that there may have been a network connectivity 'blip' (maybe a switch or router was restarted) at some point and even after connectivity was restored, the global forwarding was f

Re: [Freeipa-users] DNS forwarding configuration randomly breaks and stops working

2015-10-05 Thread nathan
>>> Looking at the log entries, it appears that there may have been a >>> network >>> connectivity 'blip' (maybe a switch or router was restarted) at some >>> point >>> and even after connectivity was restored, the global forwarding was >>> failing because the "we can't contact our forwarder" statu

Re: [Freeipa-users] DNS forwarding configuration randomly breaks and stops working

2015-10-05 Thread nathan
>>> Looking at the log entries, it appears that there may have been a >>> network >>> connectivity 'blip' (maybe a switch or router was restarted) at some >>> point >>> and even after connectivity was restored, the global forwarding was >>> failing because the "we can't contact our forwarder" statu

Re: [Freeipa-users] DNS forwarding configuration randomly breaks and stops working

2015-10-05 Thread Petr Spacek
On 3.10.2015 01:47, nat...@nathanpeters.com wrote: > This issue has occured again and I am once again trying to troubleshoot it. > > show forwarder > -- > -bash-4.2$ ipa dnsconfig-show > Global forwarders: 10.21.0.14 > Allow PTR sync: TRUE > > attempt ping > > -bash

Re: [Freeipa-users] DNS forwarding configuration randomly breaks and stops working

2015-10-02 Thread nathan
This issue has occured again and I am once again trying to troubleshoot it. show forwarder -- -bash-4.2$ ipa dnsconfig-show Global forwarders: 10.21.0.14 Allow PTR sync: TRUE attempt ping -bash-4.2$ ping stash.externaldomain.net ping: unknown host stash.externaldoma

[Freeipa-users] DNS forwarding configuration randomly breaks and stops working

2015-10-02 Thread nathan
We have a FreeIPA domain running IPA server 4.1.4 on CentOS 7. We have no per zone forwarding enabled, only a single global forwarder. This seems to work fine, but then after a while (several weeks I think) will randomly stop working. We had this issue several weeks ago on a different IPA domain