Re: [Freeipa-users] Having trouble running FreeIPA with SRV records on externally managed DNS

2015-01-22 Thread Petr Spacek
On 22.1.2015 10:44, rob.har...@stfc.ac.uk wrote: > Hi, > > Many thanks to everyone who offered advice on this. My problem appears to be > fixed. > > My solution was to change the TXT record defining the Kerberos realm to > ensure the realm name was in upper case, in quotes, and did not have a

Re: [Freeipa-users] Having trouble running FreeIPA with SRV records on externally managed DNS

2015-01-22 Thread rob.harper
Hi, Many thanks to everyone who offered advice on this. My problem appears to be fixed. My solution was to change the TXT record defining the Kerberos realm to ensure the realm name was in upper case, in quotes, and did not have a trailing period: _kerberos.my.domain. IN TXT "GRIDPP.RL.AC.UK"

Re: [Freeipa-users] Having trouble running FreeIPA with SRV records on externally managed DNS

2015-01-20 Thread rob.harper
Martin wrote: > remove the trailing dot in TXT record, it could cause problems. OK. We'll try that too. Many thanks for your input. Rob -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info

Re: [Freeipa-users] Having trouble running FreeIPA with SRV records on externally managed DNS

2015-01-20 Thread Martin Basti
On 20/01/15 16:58, rob.har...@stfc.ac.uk wrote: Daniel wrote: ; kerberos realm _kerberos.my.domain. IN TXT my.domain. this looks odd to me, our central DNS TXT record zone entry looks like --- _kerberos 86400 IN TXT"MY.DOMAIN" --- where "MY.DOMAIN" is my Kerberos realm (usually the

Re: [Freeipa-users] Having trouble running FreeIPA with SRV records on externally managed DNS

2015-01-20 Thread rob.harper
Daniel wrote: > > ; kerberos realm > > _kerberos.my.domain. IN TXT my.domain. > > this looks odd to me, our central DNS TXT record zone entry looks like > > --- > _kerberos 86400 IN TXT"MY.DOMAIN" > --- > > where "MY.DOMAIN" is my Kerberos realm (usually the domain name in > capital l

Re: [Freeipa-users] Having trouble running FreeIPA with SRV records on externally managed DNS

2015-01-20 Thread dbischof
Rob, On Mon, 19 Jan 2015, rob.har...@stfc.ac.uk wrote: I have successfully set up a test FreeIPA server and run it for a while, but the time has come to move towards a production service. I am currently running ipa-server version 3.0.0-25 on Scientific Linux 6.4 (if you don't know it, Scient

Re: [Freeipa-users] Having trouble running FreeIPA with SRV records on externally managed DNS

2015-01-20 Thread rob.harper
Hi Petr, Thanks for the reply. I wrote: > > I have been trying to set up SRV records for the FreeIPA server by > providing the autogenerated zone file to our DNS manager, who has > incorporated the configuration. When we deployed these changes, I used > dig to confirm that SRV queries were givi

Re: [Freeipa-users] Having trouble running FreeIPA with SRV records on externally managed DNS

2015-01-19 Thread Petr Spacek
On 19.1.2015 16:54, rob.har...@stfc.ac.uk wrote: > Hi all, > > I have successfully set up a test FreeIPA server and run it for a while, but > the time has come to move towards a production service. I am currently > running ipa-server version 3.0.0-25 on Scientific Linux 6.4 (if you don't > kno