<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">Hi,</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">We are working on to create another DC and extending our existing FreeIPA.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Our current environment has subnet as <a href="http://172.16.32.0/16">172.16.32.0/16</a>. In another DC we have <a href="http://10.242.96.0/20">10.242.96.0/20</a>.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">On FreeIPA master I have created a PTR Zone with 242.10.in-addr.arpa. , However, on registering the DC2 Client with FreeIPA Master it says "Hostname not found in DNS"</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Our Domain is same across DC, the only change is Subnet.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Forward Zone is working fine.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Below are Regestration Logs:</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style=""><div class="gmail_default" style=""><font face="verdana, sans-serif">[root@dr-ipadns-1002 ~]# ipa-client-install --mkhomedir --no-ntp</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Discovery was successful!</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Hostname: <a href="http://dr-ipadns-1002.klikpay.int">dr-ipadns-1002.klikpay.int</a></font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Realm: <a href="http://KLIKPAY.INT">KLIKPAY.INT</a></font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">DNS Domain: <a href="http://klikpay.int">klikpay.int</a></font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">IPA Server: <a href="http://ipa-inf-prd-ng2-02.klikpay.int">ipa-inf-prd-ng2-02.klikpay.int</a></font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">BaseDN: dc=klikpay,dc=int</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif"><br></font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Continue to configure the system with these values? [no]: yes</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">User authorized to enroll computers: admin</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Synchronizing time with KDC...</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Password for <a href="mailto:admin@KLIKPAY.INT">admin@KLIKPAY.INT</a>: </font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Successfully retrieved CA cert</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif"> Subject: CN=Certificate Authority,O=<a href="http://KLIKPAY.INT">KLIKPAY.INT</a></font></div><div class="gmail_default" style=""><font face="verdana, sans-serif"> Issuer: CN=Certificate Authority,O=<a href="http://KLIKPAY.INT">KLIKPAY.INT</a></font></div><div class="gmail_default" style=""><font face="verdana, sans-serif"> Valid From: Fri Aug 14 11:39:47 2015 UTC</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif"> Valid Until: Tue Aug 14 11:39:47 2035 UTC</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif"><br></font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Enrolled in IPA realm <a href="http://KLIKPAY.INT">KLIKPAY.INT</a></font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Attempting to get host TGT...</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Created /etc/ipa/default.conf</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">New SSSD config will be created</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Configured sudoers in /etc/nsswitch.conf</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Configured /etc/sssd/sssd.conf</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Configured /etc/krb5.conf for IPA realm <a href="http://KLIKPAY.INT">KLIKPAY.INT</a></font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">trying <a href="https://ipa-inf-prd-ng2-02.klikpay.int/ipa/xml">https://ipa-inf-prd-ng2-02.klikpay.int/ipa/xml</a></font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Forwarding 'env' to server u'<a href="https://ipa-inf-prd-ng2-02.klikpay.int/ipa/xml">https://ipa-inf-prd-ng2-02.klikpay.int/ipa/xml</a>'</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif" color="#ff0000"><b>Hostname (<a href="http://dr-ipadns-1002.klikpay.int">dr-ipadns-1002.klikpay.int</a>) not found in DNS</b></font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Failed to update DNS records.</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Forwarding 'host_mod' to server u'<a href="https://ipa-inf-prd-ng2-02.klikpay.int/ipa/xml">https://ipa-inf-prd-ng2-02.klikpay.int/ipa/xml</a>'</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">SSSD enabled</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Configuring <a href="http://klikpay.int">klikpay.int</a> as NIS domain</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Configured /etc/openldap/ldap.conf</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Configured /etc/ssh/ssh_config</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Configured /etc/ssh/sshd_config</font></div><div class="gmail_default" style=""><font face="verdana, sans-serif">Client configuration complete.</font></div><div style="font-family:verdana,sans-serif"><br></div><div style="font-family:verdana,sans-serif"><div>[root@dr-ipadns-1002 ~]# ip r</div><div><a href="http://10.242.96.0/20">10.242.96.0/20</a> dev eth0 proto kernel scope link src 10.242.96.3 </div><div><a href="http://169.254.0.0/16">169.254.0.0/16</a> dev eth0 scope link metric 1002 </div><div>default via 10.242.96.1 dev eth0 </div><div>[root@dr-ipadns-1002 ~]#</div></div><div style="font-family:verdana,sans-serif"><br></div><div style="font-family:verdana,sans-serif"><br></div><div style="font-family:verdana,sans-serif">From IPA:</div><div style="font-family:verdana,sans-serif"><br></div><div style="font-family:verdana,sans-serif"><div>[root@ipa-inf-prd-ng2-01 ~]# ipa dnszone-show 242.10.in-addr.arpa</div><div> Zone name: 242.10.in-addr.arpa.</div><div> Active zone: TRUE</div><div> Authoritative nameserver: <a href="http://ipa-inf-prd-ng2-01.klikpay.int">ipa-inf-prd-ng2-01.klikpay.int</a>.</div><div> Administrator e-mail address: hostmaster</div><div> SOA serial: 1446111284</div><div> SOA refresh: 3600</div><div> SOA retry: 900</div><div> SOA expire: 1209600</div><div> SOA minimum: 3600</div><div> Allow query: any;</div><div> Allow transfer: none;</div><div>[root@ipa-inf-prd-ng2-01 ~]# </div><div><br></div></div></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Please suggest as what I am missing.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><i style="font-size:12.8px"><span style="font-family:verdana,sans-serif">Best Regards,</span></i><br></div><div dir="ltr"><div style="font-size:12.8px"><div><i><span style="font-family:verdana,sans-serif">__________________________________________<br></span></i></div><i><span style="font-family:verdana,sans-serif">Yogesh Sharma<br></span></i></div><span style="font-size:12.8px;font-family:verdana,sans-serif"><i>Email: <a href="mailto:yks0000@gmail.com" target="_blank">yks0000@gmail.com</a> | Web: <span style="color:rgb(0,0,0)"><a href="http://www.initd.in/" target="_blank">www.initd.in</a> </span></i></span><br></div><div dir="ltr"><span style="font-size:12.8px;font-family:verdana,sans-serif"><i><span style="color:rgb(0,0,0)"><br></span></i></span></div><div><span style="font-size:12.8px;font-family:verdana,sans-serif"><i><span style="color:rgb(0,0,0)">RHCE, VCE-CIA, RACKSPACE CLOUD U Certified</span></i></span></div><div dir="ltr"><br></div><div dir="ltr"><a href="https://www.fb.com/yks0000" target="_blank"><img src="http://i.imgbox.com/ojTDSuw0.gif" alt=""></a> <a href="http://in.linkedin.com/in/yks0000" target="_blank"><img src="http://i.imgbox.com/fHLDBlyz.gif"></a> <a href="https://twitter.com/checkwithyogesh" target="_blank"><img src="http://i.imgbox.com/vTX3eOJ5.gif"></a> <a href="http://google.com/+YogeshSharmaOnGooglePlus" target="_blank"><img src="http://i.imgbox.com/W2bQouRN.gif"></a></div></div></div></div></div></div></div></div></div> </div>