7:21 a.m.
I found that adding in 70.9.10.in-addr.arpa. the entry (name="6", type=PTR,
data=ipa.quartzbio.com.) (N.B: ends with a ".") fixed the problem;
%host 10.9.70.6
6.70.9.10.in-addr.arpa domain name pointer ipa.quartzbio.com.
On Tue, Aug 15, 2017 at 12:05 PM, Karl Forner <karl.forner(a)gmail.com> wrote:
Hello,
I'm struggling to setup a new replica.
I am now wondering if the DNS configuration is good, especially the
reverse DNS.
When I run ipa-replica, from the host, using the name server from the
freeIPA master, I get:
ipa : DEBUG Check forward/reverse DNS resolution
ipa : DEBUG Search DNS server ipa.quartzbio.com (['10.9.70.6',
'10.9.70.6', '10.9.70.6']) for ipa.quartzbio.com
ipa : DEBUG Check reverse address 10.9.70.6 (ipa.quartzbio.com)
ipa : DEBUG Check failed: NXDOMAIN The DNS query name does not
exist: 6.70.9.10.in-addr.arpa.
ipa : ERROR Reverse DNS resolution of address 10.9.70.6 (
ipa.quartzbio.com) failed. Clients may not function properly. Please
check your DNS setup. (Note that this check queries IPA DNS directly and
ignores /etc/hosts.)
The master freeIPA servers is ipa.quartzbio.com at 10.9.70.6
Looking at the DNS config using the web UI, in the DNS Zone
70.9.10.in-addr.arpa., there is one entry (name="", type=NS, data=
ipa.quartzbio.com), but no record with name=6.
If I type "host 10.9.70.6" from any IPA-enrolled computer, I get
%host 10.9.70.6
Host 6.70.9.10.in-addr.arpa. not found: 3(NXDOMAIN)
I tried adding a new entry: (name="6", type=PTR, data=ipa.quartzbio.com),
but now I get:
%host 10.9.70.6
6.70.9.10.in-addr.arpa domain name pointer ipa.quartzbio.com.70.9.10.in-
addr.arpa.
and ipa-replica-install now fails with:
DEBUG The ipa-replica-install command failed, exception:
HostLookupError: The host name ipa.quartzbio.com does not match the
primary host name ipa.quartzbio.com.70.9.10.in-addr.arpa. Please check
/etc/hosts or DNS name resolution
ERROR The host name ipa.quartzbio.com does not match the primary host
name ipa.quartzbio.com.70.9.10.in-addr.arpa. Please check /etc/hosts or
DNS name resolution
So: How do I fix my reverse DNS configuration ? How should it look like ?
Thanks.
Karl