On 28.01.19 12:36, François Cami wrote:
On Mon, Jan 28, 2019 at 12:20 PM Ronald Wimmer via FreeIPA-users freeipa-users@lists.fedorahosted.org wrote:
What would be a good solution to add systems where the FQDN cannot be changed?
It's a pretty generic question, could you be more specific?
Legacy systems are in an AD domain. IPA has a trust setup to mydomain.at which includes the subdomains a.mydomain.at as well as b.mydomain.at. (AD systems can reside in mydomain.at, a.mydomain.at or b.mydomain.at)
DNS is a separate system.
[...] Depending on the actual use-case, you might want to add a DNS zone matching the one for the legacy client, and a realm domain ( https://www.freeipa.org/page/V3/Realm_Domains ) for that as well.
As stated above the legacy systems already are in a REALM controlled by AD.
Cheers, Ronald