<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> <title></title> </head> <body bgcolor="#ffffff" text="#000000"> Hello Steven, you need to set "allow-query-cache" ACL in your named.conf if you want to use your DNS server as recursive server for your clients. I'm not sure if setting of this option was changed recently, it seems it wasn't. Regards, Adam On 05/24/2011 01:09 AM, Steven Jones wrote: <blockquote cite="mid:833D8E48405E064EBC54C84EC6B36E400635607D@STAWINCOX10MBX1.staff.vuw.ac.nz" type="cite"> <pre wrap=""> Hi, Seems there is a change from 6.1 beta /earlier IPA to later....I now find that clients cant use dns as its denied....as attached screenshot....is this setting in IPA itself? or named.conf? regards</pre> <pre wrap=""> <fieldset class="mimeAttachmentHeader"></fieldset> _______________________________________________ Freeipa-users mailing list <a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre> </blockquote> </body> </html>