<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 08/19/2012 04:39 PM, Franklin Catoni
wrote:<br>
</div>
<blockquote
cite="mid:CAAdRsKRZ7mLsnmq9L3gyqPApvhC-9OfyYts3FL5DVn=XX_4nog@mail.gmail.com"
type="cite">Greetings community.
<div><br>
</div>
<div>I do not speak English so I will do my best.</div>
<div><br>
</div>
<div>I have two environments in my company, a domain "<a
moz-do-not-send="true" href="http://ejemplo.com">ejemplo.com</a>"
with Windows Active Directory running on Windows Server 2003
Enterprise Edition SP2 and domain "<a moz-do-not-send="true"
href="http://ejemplo.gob.ve">ejemplo.gob.ve</a>" with FreeIPA
v2.2. mounted on Centos 6.3 x64. This is because we are in the
middle of a platform migration process (a very slow process)
from proprietary solutions to open source.</div>
<div><br>
</div>
<div>DNS and DHCP service for my two environments is offered by
the server Centos 6.3 which is mounted FreeIPA directory,
clients are Windows computers Active Directory domain and linux
computers in the domain Ipa.</div>
<div><br>
</div>
<div>Currently the zone "<a moz-do-not-send="true"
href="http://ejemplo.gob.ve">ejemplo.gob.ve</a>" is
administered by the FreeIPA DNS using the plugin
(bind-dyndb-ldap.x86_64 v1.1.0) and I configure a slave zone
using bind (bind-9.8.2-0.10.rc1.el6_3.2 . x86_64) for the domain
"<a moz-do-not-send="true" href="http://ejemplo.com">ejemplo.com</a>"
Active Directory</div>
<div><br>
</div>
<div>Name resolution works perfectly for both Linux and Windows
clients.</div>
<div><br>
</div>
<div>Now here comes the tricky part</div>
<div><br>
</div>
<div>In order to find a more centralized management of my
services, I try to configure a slave zone to Active Directory
through FreeIPA with dyndb bind-plugin-ldap and so to eliminate
configuration through bind, but the transfers zone does not
work, causing this many problems on both platforms.</div>
<div><br>
</div>
<div>The log shows me the following error:</div>
<div><br>
</div>
<div>ServidorIPA named[3706]: zone <a moz-do-not-send="true"
href="http://ejemplo.com/IN/local">ejemplo.com/IN/local</a>:
zone serial (2012081801) unchanged. zone may fail to transfer to
slaves</div>
<div><br>
</div>
<div>
<div>I've spent enough time looking at Super Google information
that can help me but it has not been easy, because it seems to
be a rare situation.</div>
<div><br>
</div>
<div>I ask. You can set this up under these circumstances?</div>
<div>Someone has accomplished?</div>
<div>Some information that horiente me to get a solution?</div>
<div><br>
</div>
<div>Thanks for your time.</div>
</div>
<br>
</blockquote>
Hi,<br>
<br>
Is the zone not transferring at all, or is it just the updates
that's not transferred to the AD slave server?<br>
<br>
If the zone is not transferring at all: Did yo modify the "Allow
transfer" property of the zone ?<br>
<br>
If the updates is not transferring: I believe automatic increment of
the zone serial number will be supported in IPA 3.0. The IPA
developers will have to confirm that. However you can manually
change the serial number under Zone Settings.<br>
<br>
Hope this helps.<br>
<br>
<br>
Regards,<br>
Siggi<br>
<br>
</body>
</html>