On 28/08/2019 16:33, Rob Crittenden via FreeIPA-users wrote:
In addition I believe that API requests will be rejected due to
mismatching Referer headers. I believe Alexander has a WIP patch on that
somewhere.
@devel A-team (I'm serious) - I realize that in a number of places you
guys said that dns "views" are not going to be implemented.
But at least what I'm trying to do - 10.10.0.0/24 top level IPA (same
one box) IPA subdomain 10.10.1.0/24 - and I'm sure many already have and
others will keep on asking, as I'm assure that when any admin reads
this:
https://www.freeipa.org/page/DNS and:
"... It is perfectly fine to configure certain DNS zones to respond only
to clients in certain subnets or to apply other kinds of access control.
For internal names you can use arbitrary sub-domain in a DNS sub-tree
you own, e.g. int.example.com..."
first which comes to mind is most likely - to try what I'm trying now.
So, it would be fantastycznie! if future IPAs accounted and provided for
this scenario.
many thanks, L.