Boyd Ako via FreeIPA-users wrote:
On Aug 1, 2019, at 03:47, Florence Blanc-Renaud flo@redhat.com wrote:
What is the client FQDN? Is its domain managed by IPA server?
luna.neverland.ddns.me
You can check the zones managed by IPA with $ kinit admin $ ipa dnszone-find
— IPA server — [root@ipa data]# klist Ticket cache: KEYRING:persistent:0:0 Default principal: admin@NEVERLAND.DDNS.ME
Valid starting Expires Service principal 08/01/2019 22:44:29 08/02/2019 22:44:18 HTTP/ipa.neverland.ddns.me@NEVERLAND.DDNS.ME 08/01/2019 22:44:24 08/02/2019 22:44:18 krbtgt/NEVERLAND.DDNS.ME@NEVERLAND.DDNS.ME [root@ipa data]# ipa dnszone-find Zone name: 0.0.10.in-addr.arpa. Active zone: TRUE Authoritative nameserver: ipa.neverland.ddns.me. Administrator e-mail address: hostmaster.neverland.ddns.me. SOA serial: 1564568614 SOA refresh: 3600 SOA retry: 900 SOA expire: 1209600 SOA minimum: 3600 Allow query: any; Allow transfer: none;
Zone name: 3.1.7.0.7.2.1.1.0.0.0.e.5.0.6.2.ip6.arpa. Active zone: TRUE Authoritative nameserver: ipa.neverland.ddns.me. Administrator e-mail address: hostmaster.neverland.ddns.me. SOA serial: 1564567633 SOA refresh: 3600 SOA retry: 900 SOA expire: 1209600 SOA minimum: 3600 Allow query: any; Allow transfer: none;
Zone name: neverland.ddns.me. Active zone: TRUE Authoritative nameserver: ipa.neverland.ddns.me. Administrator e-mail address: hostmaster.neverland.ddns.me. SOA serial: 1564568773 SOA refresh: 3600 SOA retry: 900 SOA expire: 1209600 SOA minimum: 3600 Allow query: any; Allow transfer: none;
Number of entries returned 3
If you add --all you'll get the update policy. I'd verify that as well.
rob