[Freeipa-users] Windows Server can't use FreeIPA's DNS server

[Raul Dias]

On 14/01/2017 22:08, Fil Di Noto wrote:
> Sounds more like a client problem (firewall, hosts file, network 
> settings/routes)
Unfortunally not that I have found.
>
> Other clients are able to resolve against the IPA server?
yes.
> You are seeing the response come back on a packet capture taken from 
> the windows server?
yes.
>
> If yes to both of those, maybe the windows server thinks the IPA 
> server is not who it says it is.
How does windows verifies this?  Note that there is no active directory 
in place or domain/remote authentication from the windows point of 
view.  Windows is using it only as an plain DNS server.

Note that there is another windows server (2008) that works fine. This 
one is 2008 r2 (if it matters).

> Is the IPA server hostname/domain name the same as a previous windows 
> host? If so that is probably not good.
>
> On Sat, Jan 14, 2017 at 12:01 PM, Raul Dias <raul at dias.com.br 
> <mailto:raul at dias.com.br>> wrote:
>
>     Hello,
>
>     I am migrating a network to FreeIPA. LDAP, NFS, no Active Directory.
>
>     A Windows Server 2008 R2, cannot use FreeIPAs bind to resolve DNS
>     query.
>     This server works fine with my old bind server, google's dns
>     server (8.8.8.8), but not FreeIPA's.
>     Using wireshark, I can see the the response gets to this host, but
>     is simply ignored.  Clocks are in sync.
>
>     Not sure if the problem is in the FreeIPA's side, probably not.
>
>     Any ideas?
>
>     -rsd
>
>     --
>     Manage your subscription for the Freeipa-users mailing list:
>     https://www.redhat.com/mailman/listinfo/freeipa-users
>     <https://www.redhat.com/mailman/listinfo/freeipa-users>
>     Go to http://freeipa.org for more info on the project
>
>

-- 
Att. Raul Dias

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170115/d7cf3f79/attachment.htm>