Hi Simo, Thanks for your reply. Yes the IPA server has been updated from 2.1 to 2.2. Prior to the update, DNS zones could be created without any issues. I have also noticed that the command 'ipa ping' is displaying the incorrect IPA server version (IPA server version 2.1.90.rc1. API version 2.34) when infact the IPA server version 2.2.x should be displayed. Regards, Robert.. <div class="gmail_quote">On 27 July 2012 17:29, Simo Sorce <<a href="mailto:simo@redhat.com" target="_blank">simo@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div class="HOEnZb"><div class="h5">On Thu, 2012-07-26 at 09:47 +0200, Robert Bowell wrote: > Hi, > > > I'm encountering a strange problem.. upon trying to add a new DNS zone > the following message is being displayed "attribute > "idnsAllowTransfer" not allowed" and the DNS entry is not created. Has > any one ever encountered such a problem if so what needs to be done to > resolve it ? > > > IPA server version 2.1.3. API version 2.13 > </div></div>Was this server upgraded from a 2.0.x one ? Simo. -- Simo Sorce * Red Hat, Inc * New York </blockquote></div>