Re: [Freeipa-users] DNS denied for clients

2011-05-24 Thread Adam Tkac
Hello Steven, you need to set allow-query-cache ACL in your named.conf if you want to use your DNS server as recursive server for your clients. I'm not sure if setting of this option was changed recently, it seems it wasn't. Regards, Adam On 05/24/2011 01:09 AM, Steven Jones wrote: Hi,

Re: [Freeipa-users] DNS denied for clients

2011-05-24 Thread Simo Sorce
On Mon, 2011-05-23 at 23:09 +, Steven Jones wrote: Hi, Seems there is a change from 6.1 beta /earlier IPA to laterI now find that clients cant use dns as its deniedas attached screenshotis this setting in IPA itself? or named.conf? Are your clients in the same subnet or in

Re: [Freeipa-users] DNS denied for clients

2011-05-24 Thread Steven Jones
2011 12:13 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] DNS denied for clients On Mon, 2011-05-23 at 23:09 +, Steven Jones wrote: Hi, Seems there is a change from 6.1 beta /earlier IPA to laterI now find that clients cant use dns as its denied

Re: [Freeipa-users] DNS denied for clients

2011-05-24 Thread Simo Sorce
On Tue, 2011-05-24 at 20:10 +, Steven Jones wrote: Hi, ive been expanding the POC, they used to be all on one. Ahthey are now on different subnetsthe DHCP subnet 53.xx, server subnet 81.xx and server management subnet 87.xx. Ok then you need to consult the bind manual an

Re: [Freeipa-users] DNS denied for clients

2011-05-24 Thread Steven Jones
Subject: RE: [Freeipa-users] DNS denied for clients On Tue, 2011-05-24 at 20:10 +, Steven Jones wrote: Hi, ive been expanding the POC, they used to be all on one. Ahthey are now on different subnetsthe DHCP subnet 53.xx, server subnet 81.xx and server management subnet 87.xx

Re: [Freeipa-users] DNS denied for clients

2011-05-24 Thread Simo Sorce
On Tue, 2011-05-24 at 21:09 +, Steven Jones wrote: Hi, yes Ive done thisproblem is when its integrated into IPA I didnt know if this was the right/approved way to do it. IPA manages just the zones for now. Everything that goes in the main configuration section is handled through