<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">Thanks Michael, it seems you are correct.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">I knew I’d seen it done though - turns out that if you use route53 for your DNS amazon has a way of making it work with a virtual record type called an alias. I guess we’ll just have to use route53. At least alias lookups are free.</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><p style="color:#000;">On October 4, 2014 at 10:20:43 AM, Michael Lasevich (<a href="mailto:mlasevich@gmail.com">mlasevich@gmail.com</a>) wrote:</p> <blockquote type="cite" class="clean_bq"><span><div><div></div><div> <title></title> <p dir="ltr">You cannot have cname for a bare domain in IPA or in any DNS service, it violates DNS rfc's.</p> <div class="gmail_quote">On Oct 4, 2014 10:19 AM, "Will Sheldon" <<a href="mailto:mail@willsheldon.com">mail@willsheldon.com</a>> wrote:<br type="attribution"> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div style="word-wrap:break-word"> <div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"> <br></div> <div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"> Hello everyone : )</div> <div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"> <br></div> <div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"> <br></div> <div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"> Is it possible to configure a CNAME for a bare domain with freeIPA? </div> <div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"> <br></div> <div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"> We would like to move our site over to an Amazon ELB, but to do so we have to point our domain (<a href="http://foo.com" target="_blank">foo.com</a>, not <a href="http://www.foo.com" target="_blank">www.foo.com</a>) at an was A record with a CNAME (something like xxxxxxxxxxxx.eu-<a href="http://west-1.elb.amazonaws.com" target="_blank">west-1.elb.amazonaws.com</a>) </div> <div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"> <br></div> <div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"> This is technically possible, but IPA complains: </div> <div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"> <br></div> <div style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"> "invalid 'cnamerecord': CNAME record is not allowed to coexist with any other records except PTR"</div> <div><br></div> I’m guessing this is because of the @ NS record. <div><br></div> <div><br></div> <div>Is there any way to override this behaviour? Can I make manual modifications to the zone file?<br> <div><br></div> <div><br> <div> <div style="font-family:helvetica,arial;font-size:13px"> <br></div> <div style="font-family:helvetica,arial;font-size:13px"> <br> Will Sheldon<br> <br></div> </div> </div> </div> </div> <br> --<br> Manage your subscription for the Freeipa-users mailing list:<br> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br> Go To <a href="http://freeipa.org" target="_blank">http://freeipa.org</a> for more info on the project<br></blockquote> </div> </div></div></span></blockquote></body></html>