<div class="gmail_quote">On Sun, Feb 19, 2012 at 8:47 PM, Simo Sorce <<a href="mailto:simo@redhat.com">simo@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div class="HOEnZb"><div class="h5">On Sun, 2012-02-19 at 17:23 +0100, Marco Pizzoli wrote: > Hi, > During my setup today I'm always failing in enrolling clients with > automatic dns updates. > I'm playing with FreeIPA 2.1.90, but I guess this is a general > problem, not strictly due to the alpha version. > > I'm doing a "ipa-client-install --enable-dns-updates" and at the > console I see: > Failed to update DNS A record. (Command '/usr/bin/nsupdate > -g /etc/ipa/.dns_update.txt' returned non-zero exit status 2) > > I see in server logs that named refuses it: > Feb 19 17:05:25 freeipa01 named[2089]: client 192.168.20.112#38558: > update '<a href="http://internet.unix.mydomain.it/IN" target="_blank">internet.unix.mydomain.it/IN</a>' denied > Feb 19 17:05:25 freeipa01 named[2089]: client 192.168.20.112#40809: > update '<a href="http://internet.unix.mydomain.it/IN" target="_blank">internet.unix.mydomain.it/IN</a>' denied > > What is the cause? What other informations do you need about my > deployment? </div></div>Did you install freeipa with the --setup-dns option ? And does your client use the freeipa dns server in that case ? If either answer is no, it is normal to see the update fail as a non freeipa dns server wouldn't be able to accept the update (unless you manually configured the external server to handle GSS-TSIG updates). If both answers are yes then we may need to activate debug logging in named, as it is supposed to work. </blockquote><div> Yes to both. Please let me know the best way to do it and I will follow it. ----------- I already found a bug with the web ui. I'll send another mail in a few minutes. </div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> Simo. -- Simo Sorce * Red Hat, Inc * New York </blockquote></div>