[Freeipa-users] DNS forwarders

[Martin Kosek]

On 11/20/2014 08:10 AM, Rolf Nufable wrote:
> I've installed freeipa 4.1.1 --setup-dns --no-forwarders so far the installation went well .. but I need to configure freeipa server as a forwarder right?
> so I used te web UI and added the freeipaserver ip as a forwarder, then I rebooted the freeipa server.
> after the reboot I couldn't access the web browser. 
> Any idea on how can I fix this?? 
> TIA 
> 
>      On Wednesday, November 19, 2014 7:41 PM, Rolf Nufable <rolf_16_nufable at yahoo.com> wrote:
>    
> 
>  I have a quick question Do I need to configure the forwarders of freeipa-server 4.1.1 when doing the freeipa-install-server?
> I forgot the reason why I don't need to because my email suddenly deleted that message from Martin, and now I can't remember why or how not to include a forwarder, and how to add a forwarder manually.. 
> TIA

Forwarders just allows you to configure BIND to forward all requests for zones
it does not manage to specified name server. Normally, this is not required if
DNS is set correctly and BIND can simply get results by querying from top "."
to the required zone (e.g. "example.com.").

But in internal networks or special deployments, you need to set up the
forwarders, yes. Just make sure they point to some recursive DNS server. More
on this topic in this book for example:

http://www.zytrax.com/books/dns/ch4/

About your problem - it is probably DNS. Check where your resolv.conf is
pointing, check if DNS (named service) is running. Check  that IPA is really
running (ipactl status) and you should find where the problem is.

Martin