Hello,
I'm struggling to setup a new replica.
I am now wondering if the DNS configuration is good, especially the reverse
DNS.
When I run ipa-replica, from the host, using the name server from the
freeIPA master, I get:
ipa : DEBUG Check forward/reverse DNS resolution
ipa : DEBUG Search DNS server
ipa.quartzbio.com (['10.9.70.6',
'10.9.70.6', '10.9.70.6']) for
ipa.quartzbio.com
ipa : DEBUG Check reverse address 10.9.70.6 (
ipa.quartzbio.com)
ipa : DEBUG Check failed: NXDOMAIN The DNS query name does not
exist: 6.70.9.10.in-addr.arpa.
ipa : ERROR Reverse DNS resolution of address 10.9.70.6 (
ipa.quartzbio.com) failed. Clients may not function properly. Please check
your DNS setup. (Note that this check queries IPA DNS directly and ignores
/etc/hosts.)
The master freeIPA servers is
ipa.quartzbio.com at 10.9.70.6
Looking at the DNS config using the web UI, in the DNS Zone
70.9.10.in-addr.arpa., there is one entry (name="", type=NS, data=
ipa.quartzbio.com), but no record with name=6.
If I type "host 10.9.70.6" from any IPA-enrolled computer, I get
%host 10.9.70.6
Host 6.70.9.10.in-addr.arpa. not found: 3(NXDOMAIN)
I tried adding a new entry: (name="6", type=PTR,
data=ipa.quartzbio.com),
but now I get:
%host 10.9.70.6
6.70.9.10.in-addr.arpa domain name pointer
ipa.quartzbio.com.70.9.10.in-addr.arpa.
and ipa-replica-install now fails with:
DEBUG The ipa-replica-install command failed, exception:
HostLookupError: The host name
ipa.quartzbio.com does not match the primary
host name ipa.quartzbio.com.70.9.10.in-addr.arpa. Please check /etc/hosts
or DNS name resolution
ERROR The host name
ipa.quartzbio.com does not match the primary host
name ipa.quartzbio.com.70.9.10.in-addr.arpa. Please check /etc/hosts or DNS
name resolution
So: How do I fix my reverse DNS configuration ? How should it look like ?
Thanks.
Karl