Hi,

I have a very strange problem:

I would like to add a CNAME to the IPA DNS server, that resolves to an internal domain which is forwarded from our central DNSmasq to our consul.

I created a zone called test.boris and added a CNAME record
cname.test.boris IN CNAME cname.stage.consul.

The DNSmasq config forwards consul to 10.1.2.3:8600.

When I now query for the cname.test.boris. I get
cname.test.boris. in CNAME  cname.stage.consul.
cname.stage.consul. NXDOMAIN.
After some debugging I came to the conclusion that the NXDOMAIN response comes from freeIPA which tries to resolv this, but consul. is not in the world wide root zone it does not work.

Now I added a forward zone which tells IPA to forward this request back to DNSmasq.
In the TCP dump I can trace the package and I see that DNSmasq send the correct address back to freeIPA which answers with an empty A record.

What am I doing wrong?

--
Die Selbsthilfegruppe "UTF-8-Probleme" trifft sich diesmal abweichend im groüen Saal.