<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <p><br>
    </p>
    <br>
    <div class="moz-cite-prefix">On 22.12.2016 09:37, Maciej Drobniuch
      wrote:<br>
    </div>
    <blockquote
cite="mid:CAL0Muf+m=cuU_inGJbx-_kBRxkDsxfyJjQtUqV0bcf6f3vSaEQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">Hi Martin
        <div><br>
        </div>
        <div>Thank you for reply. </div>
        <div><br>
        </div>
        <div>1. The dig is returning proper PTR record. I've added it
          manually to the zone and it's working.</div>
      </div>
    </blockquote>
    <br>
    I was asking for SOA and zone name, IMO there is nothing secret
    about reverse zone name from private address space<br>
    <br>
    what returns this command on server?<br>
    python -c 'import netaddr; from dns import resolver; ip =
    netaddr.IPAddress("10.0.0.165"); revn = ip.reverse_dns; print revn;
    print resolver.zone_for_name(revn)'<br>
    <br>
    <br>
    <blockquote
cite="mid:CAL0Muf+m=cuU_inGJbx-_kBRxkDsxfyJjQtUqV0bcf6f3vSaEQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div>2. The problem exists while adding host entries or A
          records with "create reverse" option.</div>
      </div>
    </blockquote>
    That's why I asked to run dig, the code uses DNS system to determine
    zone.<br>
    <br>
    <blockquote
cite="mid:CAL0Muf+m=cuU_inGJbx-_kBRxkDsxfyJjQtUqV0bcf6f3vSaEQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div>3. If I'll bind a host with ipa-client-install the PTR
          record gets created in the reverse zone and it works</div>
      </div>
    </blockquote>
    Ok<br>
    <br>
    <blockquote
cite="mid:CAL0Muf+m=cuU_inGJbx-_kBRxkDsxfyJjQtUqV0bcf6f3vSaEQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div>4. The resolv.conf file has only the IPA server IP
          addres/localhost added.</div>
      </div>
    </blockquote>
    <br>
    Have you changed it recently?<br>
    <br>
    Martin<br>
    <br>
    <blockquote
cite="mid:CAL0Muf+m=cuU_inGJbx-_kBRxkDsxfyJjQtUqV0bcf6f3vSaEQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div><br>
        </div>
        <div>Cheers!</div>
        <div>M.</div>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On Wed, Dec 21, 2016 at 5:43 PM, Martin
          Basti <span dir="ltr"><<a moz-do-not-send="true"
              href="mailto:mbasti@redhat.com" target="_blank">mbasti@redhat.com</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div bgcolor="#FFFFFF" text="#000000">
              <p>Hello all :)<br>
              </p>
              <span class=""> <br>
                <div class="m_-8076435932888776012moz-cite-prefix">On
                  20.12.2016 01:33, Maciej Drobniuch wrote:<br>
                </div>
                <blockquote type="cite">
                  <div dir="ltr">
                    <div><span>Hi All!</span></div>
                    <div><span><br>
                      </span></div>
                    <div><span>I get the following message while adding
                        a new hostname. </span></div>
                    <span>
                      <div><span><br>
                        </span></div>
                      "The host was added but the DNS update failed
                      with: DNS reverse zone in-addr.arpa. for IP
                      address 10.0.0.165 is not managed by this server"</span><br
                      clear="all">
                  </div>
                </blockquote>
                <br>
              </span> IPA failed to get correct reverse zone, can you
              try dig -x 10.0.0.165 what will be in SOA answer?<br>
              <br>
              What is the name of reverse zone you have on IPA DNS
              server?<span class="HOEnZb"><font color="#888888"><br>
                  <br>
                  <br>
                  Martin</font></span><span class=""><br>
                <br>
                <blockquote type="cite">
                  <div dir="ltr">
                    <div><br>
                    </div>
                    <div>The reverse zone is configured and working. </div>
                    <div>When I am manually adding the PTR record to the
                      reverse zone - all OK</div>
                    <div><br>
                    </div>
                    <div>While adding a new host,  the A record is being
                      created but the PTR fails with the message above.</div>
                    <div><br>
                    </div>
                    <div>Reinstalling centos+IPA worked once but I had
                      to reinstall again because of problems with
                      kerberos(probably dependencies).</div>
                    <div><br>
                    </div>
                    <div>Not sure what is the root cause of the issue.</div>
                    <div><br>
                    </div>
                    <div>VERSION: 4.4.0, API_VERSION: 2.213<br>
                    </div>
                    <div><br>
                    </div>
                    <div>CENTOS7 Linux freeipa1 3.10.0-229.el7.x86_64 #1
                      SMP Fri Mar 6 11:36:42 UTC 2015 x86_64 x86_64
                      x86_64 GNU/Linux<br>
                    </div>
                    <div><br>
                    </div>
                    <div>Any help appreciated!</div>
                    -- <br>
                    <div class="m_-8076435932888776012gmail_signature">
                      <div dir="ltr">
                        <div>
                          <div dir="ltr">
                            <div>
                              <div dir="ltr">Best regards</div>
                              <div dir="ltr"><br>
                                <div><span style="font-size:12.8px">Maciej
                                    Drobniuch</span></div>
                                <div>Network Security Engineer</div>
                                <div>Collective-sense LLC</div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                  </div>
                  <br>
                  <fieldset
                    class="m_-8076435932888776012mimeAttachmentHeader"></fieldset>
                  <br>
                </blockquote>
                <br>
              </span></div>
          </blockquote>
        </div>
        <br>
        <br clear="all">
        <div><br>
        </div>
        -- <br>
        <div class="gmail_signature" data-smartmail="gmail_signature">
          <div dir="ltr">
            <div>
              <div dir="ltr">
                <div>
                  <div dir="ltr">Best regards</div>
                  <div dir="ltr"><br>
                    <div><span style="font-size:12.8px">Maciej Drobniuch</span></div>
                    <div>Network Security Engineer</div>
                    <div>Collective-sense LLC</div>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
    </blockquote>
    <br>
  </body>
</html>