Hi,
I'm labbing a FreeIPA environment for personal use, and I'm getting that
while bringing up a replica.
I set up my first freeipa-server instance on a cheap VPS on a public IP,
intend on making it publicly accessible so I can always authenticate my
laptop even on wild public networks.
I'm adding the replica as a VM(1) on a Proxmox VE, on a private network
with VPN connectivity to the first public freeipa-server, but I'm getting:
2018-01-06T20:56:04Z DEBUG The ipa-replica-install command failed,
exception: ValidationError: invalid 'dnszoneidnsname': only master zones
can contain records
. I'm trying to create the replica with CA and DNS, and I had set up DNS
forwarding to the internal DNS on the Proxmox system with:
$ ipa dnsforwardzone-add
h2.int.pdp7.net --forwarder=10.42.42.1
$ ipa dnsforwardzone-add --name-from-ip=10.42.42.0/24
--forwarder=10.42.42.1 --forward-policy=only
on the first server (I run dnsmasq on Proxmox VE, 10.42.42.0/24 -
h2.int.pdp7.net is the network it manages), and I guess that's messing with
the replica, but I'm not sure how to troubleshoot this.
Thoughts? Ideas?
Thanks,
Álex
(1) I can't seem to create a freeipa-replica on an LXC container. Is this
something that can be discussed here or should I take it to LXC?
--
___
{~._.~}
( Y )
()~*~() mail: alex at corcoles dot net
(_)-(_)
http://alex.corcoles.net/