[Freeipa-users] Trust relationship issues

[William Muriithi]

Sending again 

Previous mail hot mangled by blackberry 

‎

I have two AD and would like to retain that redundancy within IPA after establishing trust relationship. How would one achieve that?

I have attempted the following:


[root at ipa3-yyz-int ~]# ipa dnszone-add example.local --name-server=srvyyzdc02.example.local --name-server=srvyyzdc01.example.local --admin-email='systemadmin at example.com' --force --forwarder=10.10.10.90 --forwarder=10.10.10.91 --forward-policy=only --ip-address=10.10.10.90 --ip-address=10.10.10.91
ipa: ERROR: invalid 'idnssoamname': Only one value is allowed

And got the following error above

This however works

ipa dnszone-add example.local --name-server=srvyyzdc02.example.local --admin-email='systemadmin at example.com' --force --forwarder=10.10.10.91 --forward-policy=only --ip-address=10.10.10.91

What should I have done to get redundancy working? If this is not possible currently, any chance it can be implemented some day?

William