On 28.01.19 12:36, François Cami wrote:
On Mon, Jan 28, 2019 at 12:20 PM Ronald Wimmer via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
>
> What would be a good solution to add systems where the FQDN cannot be
> changed?
It's a pretty generic question, could you be more specific?
Legacy systems are in an AD domain. IPA has a trust setup to mydomain.at
which includes the subdomains a.mydomain.at as well as b.mydomain.at.
(AD systems can reside in mydomain.at, a.mydomain.at or b.mydomain.at)
DNS is a separate system.
[...]
Depending on the actual use-case, you might want to add a DNS zone
matching the one for the legacy client, and a realm domain (
https://www.freeipa.org/page/V3/Realm_Domains ) for that as well.
As stated above the legacy systems already are in a REALM controlled by AD.
Cheers,
Ronald