<html><head><meta http-equiv="Content-Type" content="text/plain;"><style> body { font-family: "Calibri","Slate Pro","sans-serif"; color:#262626 }</style> </head> <body data-blackberry-caret-color="#00a8df"><div><br name="BB10" caretmarkerset="INVALID" class="markedForCaretMarkerRemoval"></div><span style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;">Afternoon,</span><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><span style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;">I have two AD and would like to retain that redundancy within IPA after establishing trust relationship. How would one achieve that?</span><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><span style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;">I have attempted the following:</span><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><span style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;">[root@ipa3-yyz-int ~]# ipa dnszone-add example.local --name-server=srvyyzdc02.example.local --name-server=srvyyzdc01.example.local --admin-email='</span><a style="font-family: sans-serif; white-space: pre-wrap;">systemadmin@example.com</a><span style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;">' --force --forwarder=10.10.10.90 --forwarder=10.10.10.91 --forward-policy=only --ip-address=10.10.10.90 --ip-address=10.10.10.91</span><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><span style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;">ipa: ERROR: invalid 'idnssoamname': Only one value is allowed</span><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><span style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;">And got the following error above</span><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><span style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;">This however works</span><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><span style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;">ipa dnszone-add example.local --name-server=srvyyzdc02.example.local --admin-email='</span><a href="invoke://1,default:0,eyJ1cmkiOiJtYWlsdG86c3lzdGVtYWRtaW5AZXhhbXBsZS5jb20iLCJkYXRhIjoiYzNsemRHVnRZV1J0YVc1QVpYaGhiWEJzWlM1amIyMEEifQ==" style="font-family: sans-serif; white-space: pre-wrap;">systemadmin@example.com</a><span style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;">' --force --forwarder=10.10.10.91 --forward-policy=only --ip-address=10.10.10.91</span><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><span style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;">What should I have done to get redundancy working? If this is not possible currently, any chance it can be implemented some day?</span><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><br style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;"><div><span style="color: rgb(0, 0, 0); font-family: sans-serif; white-space: pre-wrap;">William</span></div><div></div></body></html>