DNS not resolving IPA Clients or IPA Server

[Sameer Gurung]

Hi all,
have weird problem suddenly. I was getting a DNS update error on client
installs. My server has been installed with the setup-dns option. While
trying to figure that problem out I dont know what I did but now the ipa
dns server does not resolve any ipa clients. I had set it up as a
forwarding server and it does forward requests (forward only) but now none
of my clients hostnames can be resolved. Where do I start figuring this
problem out.

A nood here so looking for all the help I can get


with regards,



*-----------------------------------------------------------------------Sameer
Kr.
Gurung-----------------------------------------------------------------------*

-- 
This message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail. Please notify the sender 
immediately by e-mail if you have received this e-mail by mistake and 
delete this e-mail from your system. E-mail transmission cannot be 
guaranteed to be secure or error-free as information could be intercepted, 
corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. 
The sender therefore does not accept liability for any errors or omissions 
in the contents of this message, which arise as a result of e-mail 
transmission. If verification is required please request a hard-copy 
version. Saint Mary's College, Shillong, Meghalaya, India-793003,

smcs.ac.in <http://smcs.ac.in>

[Lachlan Musicman]

On 10 July 2018 at 21:08, Sameer Gurung via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org&gt; wrote:

>  Hi all,
>  have weird problem suddenly. I was getting a DNS update error on client
>  installs. My server has been installed with the setup-dns option. While
>  trying to figure that problem out I dont know what I did but now the ipa
>  dns server does not resolve any ipa clients. I had set it up as a
>  forwarding server and it does forward requests (forward only) but now none
>  of my clients hostnames can be resolved. Where do I start figuring this
>  problem out.
>  
Sameer, I am not the person to help you with this problem - but I can tell
you that letting us know what Operating System you are using, and which
version of ipa-server you are using, will always be appreciated!

Good luck

L.

[Alexander Bokovoy]

On ti, 10 heinä 2018, Lachlan Musicman via FreeIPA-users wrote:
> On 10 July 2018 at 21:08, Sameer Gurung via FreeIPA-users <
> freeipa-users(a)lists.fedorahosted.org&gt; wrote:
>
> >
> >
> > Hi all,
> > have weird problem suddenly. I was getting a DNS update error on client
> > installs. My server has been installed with the setup-dns option. While
> > trying to figure that problem out I dont know what I did but now the ipa
> > dns server does not resolve any ipa clients. I had set it up as a
> > forwarding server and it does forward requests (forward only) but now none
> > of my clients hostnames can be resolved. Where do I start figuring this
> > problem out.
> >
>
> Sameer, I am not the person to help you with this problem - but I can tell
> you that letting us know what Operating System you are using, and which
> version of ipa-server you are using, will always be appreciated! 
Also, start by
demonstrating actual problems.

"none of my clients hostnames can be resolved" -> show how you resolve
them with 'dig' utility. What is your /etc/resolv.conf on the machine
where you run 'dig'. Explain which DNS resolvers are used there.

DNS resolution issues are typically due to:
 - having wrong DNS zone delegation or not having that at all
 - not talking to the right DNS servers
 - firewalls not being set up properly to pass DNS requests

-- 
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland

[Sameer Gurung]

my IPA server is linserver. IP: 192.168.0.111
domain is dcs.smcs

on my client machine /etc/resolv.conf
namserver 192.168.0.111

when i dig linserver.dcs.smcs

I get no result. ANSWER 0

am on ipa server 4.5 on cent os 7

the firewall allows DNS requests. port 53, 80, 443 open for tcp and udp

thank you all for your time. any help will be appreciated

Sameer



On Tue, Jul 10, 2018 at 5:17 PM, Alexander Bokovoy via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org&gt; wrote:

>  On ti, 10 heinä 2018, Lachlan Musicman via FreeIPA-users wrote:
>
> > On 10 July 2018 at 21:08, Sameer Gurung via FreeIPA-users <
> > freeipa-users(a)lists.fedorahosted.org&gt; wrote:
> >
> >
> >>
> >> Hi all,
> >> have weird problem suddenly. I was getting a DNS update error on client
> >> installs. My server has been installed with the setup-dns option. While
> >> trying to figure that problem out I dont know what I did but now the ipa
> >> dns server does not resolve any ipa clients. I had set it up as a
> >> forwarding server and it does forward requests (forward only) but now
> >> none
> >> of my clients hostnames can be resolved. Where do I start figuring this
> >> problem out.
> >>
> >>
> > Sameer, I am not the person to help you with this problem - but I can tell
> > you that letting us know what Operating System you are using, and which
> > version of ipa-server you are using, will always be appreciated!
> >
>  Also, start by demonstrating actual problems.
>
>  "none of my clients hostnames can be resolved" -> show how you resolve
>  them with 'dig' utility. What is your /etc/resolv.conf on the machine
>  where you run 'dig'. Explain which DNS resolvers are used there.
>
>  DNS resolution issues are typically due to:
>  - having wrong DNS zone delegation or not having that at all
>  - not talking to the right DNS servers
>  - firewalls not being set up properly to pass DNS requests
>
>  --
>  / Alexander Bokovoy
>  Sr. Principal Software Engineer
>  Security / Identity Management Engineering
>  Red Hat Limited, Finland
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives: https://lists.fedoraproject.or
>  g/archives/list/freeipa-users(a)lists.fedorahosted.org/message
>  /MOYAONXQDPBKMXA6LW6LJ4Z5FPUW2OWZ/
>  
-- 
This message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail. Please notify the sender 
immediately by e-mail if you have received this e-mail by mistake and 
delete this e-mail from your system. E-mail transmission cannot be 
guaranteed to be secure or error-free as information could be intercepted, 
corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. 
The sender therefore does not accept liability for any errors or omissions 
in the contents of this message, which arise as a result of e-mail 
transmission. If verification is required please request a hard-copy 
version. Saint Mary's College, Shillong, Meghalaya, India-793003,

smcs.ac.in <http://smcs.ac.in>

[Lachlan Musicman]

On 11 July 2018 at 14:39, Sameer Gurung via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org&gt; wrote:

>  my IPA server is linserver. IP: 192.168.0.111
>  domain is dcs.smcs
>
>  on my client machine /etc/resolv.conf
>  namserver 192.168.0.111
>
>  when i dig linserver.dcs.smcs
>
>  I get no result. ANSWER 0
>
>  am on ipa server 4.5 on cent os 7
>
>  the firewall allows DNS requests. port 53, 80, 443 open for tcp and udp
>  
Sameer,

That ip address 192.168.0.111 is a private address, so I presume you are on
an internal network.

The resolve.conf on the client has a spelling error - it should be

nameserver 192.168.0.111

Fix that and try again?

Note that CentOS will overwrite /etc/resolv.conf everytime you reboot.
Google CentOS or RedHat resolv.conf to find a number of solutions to that
issue.

Cheers
L.