On Aug 1, 2019, at 03:47, Florence Blanc-Renaud
<flo(a)redhat.com> wrote:
What is the client FQDN? Is its domain managed by IPA server?
luna.neverland.ddns.me
You can check the zones managed by IPA with
$ kinit admin
$ ipa dnszone-find
— IPA server —
[root@ipa data]# klist
Ticket cache: KEYRING:persistent:0:0
Default principal: admin(a)NEVERLAND.DDNS.ME
Valid starting Expires Service principal
08/01/2019 22:44:29 08/02/2019 22:44:18 HTTP/ipa.neverland.ddns.me(a)NEVERLAND.DDNS.ME
08/01/2019 22:44:24 08/02/2019 22:44:18 krbtgt/NEVERLAND.DDNS.ME(a)NEVERLAND.DDNS.ME
[root@ipa data]# ipa dnszone-find
Zone name: 0.0.10.in-addr.arpa.
Active zone: TRUE
Authoritative nameserver: ipa.neverland.ddns.me.
Administrator e-mail address: hostmaster.neverland.ddns.me.
SOA serial: 1564568614
SOA refresh: 3600
SOA retry: 900
SOA expire: 1209600
SOA minimum: 3600
Allow query: any;
Allow transfer: none;
Zone name: 3.1.7.0.7.2.1.1.0.0.0.e.5.0.6.2.ip6.arpa.
Active zone: TRUE
Authoritative nameserver: ipa.neverland.ddns.me.
Administrator e-mail address: hostmaster.neverland.ddns.me.
SOA serial: 1564567633
SOA refresh: 3600
SOA retry: 900
SOA expire: 1209600
SOA minimum: 3600
Allow query: any;
Allow transfer: none;
Zone name: neverland.ddns.me.
Active zone: TRUE
Authoritative nameserver: ipa.neverland.ddns.me.
Administrator e-mail address: hostmaster.neverland.ddns.me.
SOA serial: 1564568773
SOA refresh: 3600
SOA retry: 900
SOA expire: 1209600
SOA minimum: 3600
Allow query: any;
Allow transfer: none;
----------------------------
Number of entries returned 3
----------------------------
If the client's domain is not managed by IPA, IPA server won't accept the
nsupdate command.
It is.
The other point to check is that the client's /etc/resolv.conf correctly points to
the the DNS server.
Yep… apparently that was one of the issues. But, still failing.
See previous post.
Domo,
Boyd H. Ako
boyd.hanalei.ako(a)gmail.com
(424) 244-9653
https://www.boydhanaleiako.me
“Coming together is a beginning. Keeping together is progress. Working together is
success.” -Henry Ford
PGP/GPG Public Key:
https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134