IPA DNS ACL (respond with a different IP depending on the requester)

[Daniel PC]

I would like to configure DNS to respond with a different IP depending on the requester
source IP.  Bind allow it using ACL.
Do you know if it is possible to implement this feature on IPA integrated DNS?

thank you

[Alexander Bokovoy]

On ti, 24 maalis 2020, Daniel PC via FreeIPA-users wrote:
> I would like to configure DNS to respond with a different IP
> depending
> on the requester source IP.  Bind allow it using ACL.  Do you know if
> it is possible to implement this feature on IPA integrated DNS? 
Can you show bind's equivalent configuration? Then we can discuss
whether this is possible or not.

For one, FreeIPA's bind-dyndb-ldap does not support multiple views
because all zones from IPA are represented as a single (default) view by
bind-dyndb-ldap (that and there are other technical reasons which
prevent implementing full multi-view support).

-- 
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland

[Daniel PC]

I confirm my configuration have something like:

view test1 {
        match-clients{ ...;};
};

view test2 {
        match-clients{ ...;};
};

Any suggestion as alternative to views?

Thank you