I am trying to spin up a new 2-node cluster in my lab environment.

 

I have FreeIPA installed, and can login to the web UI.

At this point, I’m trying to establish a trust with AD:

 

ipa trust-add --type=ad example.net --admin administrator

 

Based on the errors I was getting with that command’s stdout and subsequent research, it occurred to me that I don’t have DNS resolution to our corporate internal DNS from my lab environment.

 

As this is a lab environment, I really don’t care about best practices (although I do eventually want to get corporate DNS resolution into my lab, that’s likely not happening until January given the holidays… and I need to make progress on this project if at all possible).

 

Is it possible to set the required AD records into `/etc/hosts` on each of the (2) nodes?

 

And/or since I already have IdM installed with DNS services, is it possible for me to go into the web UI, and create a new DNS zone in there for the upstream AD environment?

 

Here are the records I’ve entered into my /etc/hosts file on the master FreeIPA server that I’m trying to use to establish the trust

(As you can see, we have 4 AD servers, so I have set the “A” record in /etc/hosts four different times):

 

Idm-node-1.fiberlab.example.net

Idm-node-2.fiberlab.example.net

example.net

example.net

example.net

example.net

_kerberos._tcp.example.net

_kerberos._tcp.example.net

_kerberos._tcp.example.net

_kerberos._tcp.example.net

_kerberos._udp.example.net

_kerberos._udp.example.net

_kerberos._udp.example.net

_kerberos._udp.example.net