[Freeipa-users] ipa-dns-install on a remote host?

[Schmitt, Christian]

At the moment i configured bind to be a slave and just get the zone from
the ipa dns. but still i think thats not the best way to do it. since i
will also have some hosts in the zonefile that shouldn't be public.

But I think that problem isn't related to ipa. I'm really happy about ipa
right know and just playing around with it and hope that we could deploy it
live, soon.

Btw. are there any tips by having a second nameserver (public) that just
gives out the important/public hosts?
Or is there a good way in having a domain configured twice? like the
internal ip for ipa-users and the external ip for the people outside of the
internal firewall?


P.S.: I'm not that much familiar with bind9/10. I'm just learning to use it
correctly and make a good enviroment with ipa.


2013/7/5 Rob Crittenden <rcritten at redhat.com>

> Schmitt, Christian wrote:
>
>> is it possible to install ipa-dns-install on a remote host that is only
>> connect via vpn?
>>
>> I mean this i my current network structure:
>>
>> Host (Internet)                                               Intranet
>> VPN Access Provider  tun   <  -  > tun             FreeIPA Server dc01
>> dc02
>>
>> when i now try to ipa-dns-install with the ip from the client ip of the
>> tun device of the FreeIPA Server i always get an error that the ip is
>> not on my device. Is there an easy way of having the DNS of the FreeIPA
>> Server on an Internet Machine? I mean it will work if i replicate the
>> whole ipa-server but that is somehow a little bit of an overkill.
>>
>
> We provide no tool to configure DNS as a standalone service. The
> ipa-dns-install tool will only configure a bind server running on an IPA
> master.
>
> It is possible to configure bind/bind-dyndb-ldap to run on another host
> but you'd likely have performance issues and there could be problems at
> upgrade if we make configuration changes (they wouldn't be applied to your
> manually-configured instance).
>
> rob
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20130705/2c82839e/attachment.htm>