FreeIPA-users February 2022

freeipa-users@lists.fedorahosted.org

54 participants
93 discussions

Accidentally deleted NS record
by Nikolay Sukhno 02 Feb '22

02 Feb '22

FreeIPA 4.9.6 One Server. I made a big mistake - accidentally deleted NS record from my dns zone and reload named. Zone configured via dyndb Now the dns server is not starting - zone company.local/IN: has no NS records If I try to add ns record from command line ipa dnsrecord-add gisw.ru @ --ns-hostname=vm-it-ipa1.company.local. ipa: ERROR: All nameservers failed to answer the query vm-it-ipa1.company.local.ru. IN A: Server 127.0.0.1 UDP port 53 answered SERVFAIL I'm stumped....

2 3

Short names in named dyndb module
by Nikolay Sukhno 02 Feb '22

02 Feb '22

I understand that short names in DNS are not what you need The DNS suffix is substituted on the client side from the resolv.conf, tcp\ip settings etc. But in my infrastructure there are some strings for short names and I would like the dns server to supply the suffix itself. There is no problem in the "classic" bind - the first short name found in the zones and return fdqn. But when using dindb as part of FreeIPA this doesn't happen. Maybe there is some kind of workround?

1 0

AD groups detected only on one ipa server
by iulian roman 02 Feb '22

02 Feb '22

Hi everybody, I have an IPA setup with AD trust and when I added a new group in AD it is detected only on one ipa server (I have 2 ipa servers in replication mode). getent group correctly returns the group only on one IPA server, therefore only the ipa clients enrolled to that ipa server can see the group. In the sssd logs I can see the following error: [ipa_s2n_exop_done] (0x0040): ldap_extended_operation result: No such object(32), (null). If i try to add the AD group as external to a IPA group , by executing: ipa group-add-member ad_group --external "infosec(a)example.local" , I get the following error: member group: infosec(a)example.local: trusted domain object not found Any idea how can I solve or troubleshoot it?

2 2

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-users February 2022