[Freeipa-users] IPA and DNS reverse subnets

lejeczek peljasz at yahoo.co.uk
Mon Jan 30 18:01:03 UTC 2017


hi everybody

I'm having trouble trying to figure out, or in other words 
make this to work:

I'm setting up a domain in a subnet like this: 10.5.10.48/28 
but not sure it I got it right.
Host reverse resoling does not seem to right. I have:

   Zone name: whale.private.
   Active zone: TRUE
   Authoritative nameserver: work1.whale.private.
   Administrator e-mail address: hostmaster.whale.private.
   SOA serial: 1485797688
   SOA refresh: 3600
   SOA retry: 900
   SOA expire: 1209600
   SOA minimum: 3600
   Allow query: any;
   Allow transfer: none;

   Zone name: 28/48.10.5.10.in-addr.arpa.   <= this here is 
like non-usual, I understand it's how such a reverse subnet 
should be defined, but not 100% sure.
   Active zone: TRUE
   Authoritative nameserver: work1.whale.private.
   Administrator e-mail address: hostmaster
   SOA serial: 1485790340
   SOA refresh: 3600
   SOA retry: 900
   SOA expire: 1209600
   SOA minimum: 3600
   Allow query: any;
   Allow transfer: none;

but:

~]$ host 10.5.10.55
Host 55.10.5.10.in-addr.arpa. not found: 3(NXDOMAIN)

and when I try to install a replica:

~]$ ipa-replica-install --setup-dns --no-forwarders --setup-ca
Password for admin at WHALE.PRIVATE:
ipa         : ERROR    Reverse DNS resolution of address 
10.5.10.55 (work1.whale.private) failed. Clients may not 
function properly. Please check your DNS setup. (Note that 
this check queries IPA DNS directly and ignores /etc/hosts.)

I understand it's all in DNS, so.. how to tweak it, to fix it?
many thank,
L.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170130/f1d412f3/attachment.htm>


More information about the Freeipa-users mailing list