[Freeipa-users] DNS zone transfers

[Simo Sorce]

On Thu, 2011-06-16 at 10:31 -0430, Loris Santamaria wrote:
> Hi,
> 
> I would like to use my freeIPA v2 server as my master name server and
> have other normal (non ldap based) bind servers as caching / secondary
> name servers. Ideally the clients would query only the secondary servers
> and the secondary name servers would perform regular zone transfers from
> the master server.
> 
> So I'm trying to setup zone transfer in my IPA based name server. First
> of all I see that the attribute "idnsAllowTransfer" referenced in the
> bind-dyndb-ldap documentation is not really supported in the schema
> installed in IPA. Next, using a global "allow-transfer" in named.conf
> doesn't work also.

A global allow-transfer should work, have you restarted named after
setting it ?

If it doesn't work we may have a bug.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York