On 08/05/2024 16:16, Tania Hagan via FreeIPA-users wrote:
Turns out this was a DNS issue, thank you for responding.
We had our /etc/resolv.conf pointing to local host and adding another ipa server as the top nameserver solved the issue. This begs the question by default installing with the ansible playbook it adds the localhost has the nameserver, which is the preferred setup?
Assuming your IPA server runs the integrated DNS service, it should have 127.0.0.1 as the only nameserver.
It's then the job of BIND on that server to provide recursive DNS service for other stuff running on the server. Typically you'd configure global and/or per-server forwarders so that queries for names outside of your domain's configured DNS zones are forwarded elsewhere.
So if DNS resolution on a server breaks, BIND is the component to investigate & fix.