<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Sure Petr. Will go through it. Thanks for Sharing.</div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><i style="font-size:12.8000001907349px"><span style="font-family:verdana,sans-serif">Best Regards,</span></i><br></div><div dir="ltr"><div style="font-size:12.8000001907349px"><div><i><span style="font-family:verdana,sans-serif">__________________________________________<br></span></i></div><i><span style="font-family:verdana,sans-serif">Yogesh Sharma<br></span></i></div><span style="font-size:12.8000001907349px;font-family:verdana,sans-serif"><i>Email: <a href="mailto:yks0000@gmail.com" target="_blank">yks0000@gmail.com</a> | Web: <span style="color:rgb(0,0,0)"><a href="http://www.initd.in/" target="_blank">www.initd.in</a> </span></i></span><br></div><div dir="ltr"><span style="font-size:12.8000001907349px;font-family:verdana,sans-serif"><i><span style="color:rgb(0,0,0)"><br></span></i></span></div><div><span style="font-size:12.8000001907349px;font-family:verdana,sans-serif"><i><span style="color:rgb(0,0,0)">RHCE, VCE-CIA, RACKSPACE CLOUD U Certified</span></i></span></div><div dir="ltr"><br></div><div dir="ltr"><a href="https://www.fb.com/yks0000" target="_blank"><img src="http://i.imgbox.com/ojTDSuw0.gif" alt=""></a> <a href="http://in.linkedin.com/in/yks0000" target="_blank"><img src="http://i.imgbox.com/fHLDBlyz.gif"></a> <a href="https://twitter.com/checkwithyogesh" target="_blank"><img src="http://i.imgbox.com/vTX3eOJ5.gif"></a> <a href="http://google.com/+YogeshSharmaOnGooglePlus" target="_blank"><img src="http://i.imgbox.com/W2bQouRN.gif"></a></div></div></div></div></div></div></div></div></div> <br><div class="gmail_quote">On Thu, Oct 29, 2015 at 5:33 PM, Petr Spacek <span dir="ltr"><<a href="mailto:pspacek@redhat.com" target="_blank">pspacek@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 29.10.2015 11:33, Yogesh Sharma wrote:<br> > Hi,<br> ><br> > We are working on to create another DC and extending our existing FreeIPA.<br> ><br> > Our current environment has subnet as <a href="http://172.16.32.0/16" rel="noreferrer" target="_blank">172.16.32.0/16</a>. In another DC we have<br> > <a href="http://10.242.96.0/20" rel="noreferrer" target="_blank">10.242.96.0/20</a>.<br> ><br> > On FreeIPA master I have created a PTR Zone with 242.10.in-addr.arpa. ,<br> > However, on registering the DC2 Client with FreeIPA Master it says<br> > "Hostname not found in DNS"<br> <br> This message tells you that "hostname" (i.e. what you see in output of command<br> "hostname") does not have A/AAAA record in DNS. It has nothing to do with PTR<br> records.<br> <br> Message "Failed to update DNS records." is usually caused by misconfigured DNS<br> zones.<br> <br> Please see<br> <a href="https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/SyncPTR" rel="noreferrer" target="_blank">https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/SyncPTR</a><br> for advice how to configure DNS zones to accept dynamic updates.<br> <br> I hope this helps.<br> Petr^2 Spacek<br> <br> > Our Domain is same across DC, the only change is Subnet.<br> ><br> > Forward Zone is working fine.<br> ><br> ><br> > Below are Regestration Logs:<br> ><br> > [root@dr-ipadns-1002 ~]# ipa-client-install --mkhomedir --no-ntp<br> > Discovery was successful!<br> > Hostname: <a href="http://dr-ipadns-1002.klikpay.int" rel="noreferrer" target="_blank">dr-ipadns-1002.klikpay.int</a><br> > Realm: <a href="http://KLIKPAY.INT" rel="noreferrer" target="_blank">KLIKPAY.INT</a><br> > DNS Domain: <a href="http://klikpay.int" rel="noreferrer" target="_blank">klikpay.int</a><br> > IPA Server: <a href="http://ipa-inf-prd-ng2-02.klikpay.int" rel="noreferrer" target="_blank">ipa-inf-prd-ng2-02.klikpay.int</a><br> > BaseDN: dc=klikpay,dc=int<br> ><br> > Continue to configure the system with these values? [no]: yes<br> > User authorized to enroll computers: admin<br> > Synchronizing time with KDC...<br> > Password for <a href="mailto:admin@KLIKPAY.INT">admin@KLIKPAY.INT</a>:<br> > Successfully retrieved CA cert<br> > Subject: CN=Certificate Authority,O=<a href="http://KLIKPAY.INT" rel="noreferrer" target="_blank">KLIKPAY.INT</a><br> > Issuer: CN=Certificate Authority,O=<a href="http://KLIKPAY.INT" rel="noreferrer" target="_blank">KLIKPAY.INT</a><br> > Valid From: Fri Aug 14 11:39:47 2015 UTC<br> > Valid Until: Tue Aug 14 11:39:47 2035 UTC<br> ><br> > Enrolled in IPA realm <a href="http://KLIKPAY.INT" rel="noreferrer" target="_blank">KLIKPAY.INT</a><br> > Attempting to get host TGT...<br> > Created /etc/ipa/default.conf<br> > New SSSD config will be created<br> > Configured sudoers in /etc/nsswitch.conf<br> > Configured /etc/sssd/sssd.conf<br> > Configured /etc/krb5.conf for IPA realm <a href="http://KLIKPAY.INT" rel="noreferrer" target="_blank">KLIKPAY.INT</a><br> > trying <a href="https://ipa-inf-prd-ng2-02.klikpay.int/ipa/xml" rel="noreferrer" target="_blank">https://ipa-inf-prd-ng2-02.klikpay.int/ipa/xml</a><br> > Forwarding 'env' to server u'<a href="https://ipa-inf-prd-ng2-02.klikpay.int/ipa/xml" rel="noreferrer" target="_blank">https://ipa-inf-prd-ng2-02.klikpay.int/ipa/xml</a>'<br> > *Hostname (<a href="http://dr-ipadns-1002.klikpay.int" rel="noreferrer" target="_blank">dr-ipadns-1002.klikpay.int</a> <<a href="http://dr-ipadns-1002.klikpay.int" rel="noreferrer" target="_blank">http://dr-ipadns-1002.klikpay.int</a>>)<br> > not found in DNS*<br> > Failed to update DNS records.<br> > Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub<br> > Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub<br> > Forwarding 'host_mod' to server u'<br> > <a href="https://ipa-inf-prd-ng2-02.klikpay.int/ipa/xml" rel="noreferrer" target="_blank">https://ipa-inf-prd-ng2-02.klikpay.int/ipa/xml</a>'<br> > SSSD enabled<br> > Configuring <a href="http://klikpay.int" rel="noreferrer" target="_blank">klikpay.int</a> as NIS domain<br> > Configured /etc/openldap/ldap.conf<br> > Configured /etc/ssh/ssh_config<br> > Configured /etc/ssh/sshd_config<br> > Client configuration complete.<br> ><br> > [root@dr-ipadns-1002 ~]# ip r<br> > <a href="http://10.242.96.0/20" rel="noreferrer" target="_blank">10.242.96.0/20</a> dev eth0 proto kernel scope link src 10.242.96.3<br> > <a href="http://169.254.0.0/16" rel="noreferrer" target="_blank">169.254.0.0/16</a> dev eth0 scope link metric 1002<br> > default via 10.242.96.1 dev eth0<br> > [root@dr-ipadns-1002 ~]#<br> ><br> ><br> >>From IPA:<br> ><br> > [root@ipa-inf-prd-ng2-01 ~]# ipa dnszone-show 242.10.in-addr.arpa<br> > Zone name: 242.10.in-addr.arpa.<br> > Active zone: TRUE<br> > Authoritative nameserver: <a href="http://ipa-inf-prd-ng2-01.klikpay.int" rel="noreferrer" target="_blank">ipa-inf-prd-ng2-01.klikpay.int</a>.<br> > Administrator e-mail address: hostmaster<br> > SOA serial: <a href="tel:1446111284" value="+911446111284">1446111284</a><br> > SOA refresh: 3600<br> > SOA retry: 900<br> > SOA expire: 1209600<br> > SOA minimum: 3600<br> > Allow query: any;<br> > Allow transfer: none;<br> > [root@ipa-inf-prd-ng2-01 ~]#<br> ><br> ><br> ><br> > Please suggest as what I am missing.<br> <span class="HOEnZb"><font color="#888888"><br> <br> --<br> Petr^2 Spacek<br> <br> --<br> Manage your subscription for the Freeipa-users mailing list:<br> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br> Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project<br> </font></span></blockquote></div><br></div>