[Freeipa-users] Having issues/confusion about setting up a forwarding zone

[mike clagett]

hi all,

Here is my scenario.  I will just use .mike as my TLD example here:

TLD domain - .mike

Primary FreeIPA server that is serving as my master DNS - freeipa.mike

Within this setup, I want to set up a dns zone called dev.mike, with its own DNS server
called freeipa0.dev.mike to manage all dns in the dev.mike zone, while leaving
freeipa.mike to manage the rest production dns.

In my client machine (Mac OS X) - when I try to nslookup a domain in the dev.mike zone, I
get a non-authoritative answer from the freeipa.mike server.

Results of forwardzone-show for my freeipa.mike:

ipa dnsforwardzone-show dev.mike.
  Zone name: dev.mike.
  Active zone: TRUE
  Zone forwarders: 10.x.x.x. (this IP is the correct IP address of the freeipa0.dev.mike
server)
  Forward policy: first

The issue I am having is sometimes my dev.mike domains just won't resolve, and I have
to manually add the dev.mike dns server to my network settings and remove all the other
DNS settings to get to VM's in my dev.mike zone.

Can anybody assist me with some troubleshooting to figure out why why dns forwarding
isn't working 100% reliably?