<div dir="ltr"><div class="gmail_extra">Thanks, that helps a lot.</div><div class="gmail_extra"><br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Yes and no. What you see with "@ NS ..." is a glue record -- you are<br> supposed to have a glue record for IPA domain in the upstream domain,<br> this is how domain delegation works in DNS world.</blockquote></div><div class="gmail_extra"><br></div>Except what i saw was the other way around. The FreeIPA server has an NSrecord claiming that it is authoritative the parent domain, but its parent domain is hosted at dnsmadeeasy:</div><div class="gmail_extra"><br></div><div class="gmail_extra">~ dig @<a href="http://8.8.8.8">8.8.8.8</a> -t NS <a href="http://lautus.net">lautus.net</a><br></div><div class="gmail_extra"><a href="http://lautus.net">lautus.net</a>.<span class="gmail-Apple-tab-span" style="white-space:pre"> </span>86399<span class="gmail-Apple-tab-span" style="white-space:pre"> </span>IN<span class="gmail-Apple-tab-span" style="white-space:pre"> </span>NS<span class="gmail-Apple-tab-span" style="white-space:pre"> </span><a href="http://ns15.dnsmadeeasy.com">ns15.dnsmadeeasy.com</a>.<br></div><div class="gmail_extra"><div class="gmail_extra">~ dig @<a href="http://8.8.8.8">8.8.8.8</a> -t NS <a href="http://ipa.lautus.net">ipa.lautus.net</a></div><div class="gmail_extra"><a href="http://ipa.lautus.net">ipa.lautus.net</a>.<span class="gmail-Apple-tab-span" style="white-space:pre"> </span>86399<span class="gmail-Apple-tab-span" style="white-space:pre"> </span>IN<span class="gmail-Apple-tab-span" style="white-space:pre"> </span>NS<span class="gmail-Apple-tab-span" style="white-space:pre"> </span><a href="http://ipa-hetzner-cpt4-01.lautus.net">ipa-hetzner-cpt4-01.lautus.net</a>.</div><div><br></div><div>But as far as the FreeIPA DNS is concerned, it is authoritative for everything:</div><div><br></div><div>~ dig @<a href="http://ipa-hetzner-cpt4-01.lautus.net">ipa-hetzner-cpt4-01.lautus.net</a> -t NS <a href="http://lautus.net">lautus.net</a></div><div><div><a href="http://lautus.net">lautus.net</a>.<span class="gmail-Apple-tab-span" style="white-space:pre"> </span>86400<span class="gmail-Apple-tab-span" style="white-space:pre"> </span>IN<span class="gmail-Apple-tab-span" style="white-space:pre"> </span>NS<span class="gmail-Apple-tab-span" style="white-space:pre"> </span><a href="http://ipa-hetzner-cpt4-01.lautus.net">ipa-hetzner-cpt4-01.lautus.net</a>.</div></div><div><div>~ dig @<a href="http://ipa-hetzner-cpt4-01.lautus.net">ipa-hetzner-cpt4-01.lautus.net</a> -t NS <a href="http://ipa.lautus.net">ipa.lautus.net</a></div><div></div><div><a href="http://ipa.lautus.net">ipa.lautus.net</a>.<span class="gmail-Apple-tab-span" style="white-space:pre"> </span>86400<span class="gmail-Apple-tab-span" style="white-space:pre"> </span>IN<span class="gmail-Apple-tab-span" style="white-space:pre"> </span>NS<span class="gmail-Apple-tab-span" style="white-space:pre"> </span><a href="http://ipa-hetzner-cpt4-01.lautus.net">ipa-hetzner-cpt4-01.lautus.net</a>.</div></div><div><br></div><div><br></div></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr">Pieter Nagel<div>Lautus Solutions (Pty) Ltd</div><div><div style="font-size:small">Building 27, The Woodlands, 20 Woodlands Drive, Woodmead, Gauteng</div></div><div>0832587540</div></div></div></div></div> </div></div>