Hello,
I have freeipa running with two DNS zones: one I configured during the
initial install and a second one I added later. This new zone is
obviously still part of the same kerberos realm.
When I join a client in the new DNS zone to the freeipa domain, I see
these errors:
Failed to update DNS records.
Missing A/AAAA record(s) for host server.seconddomain.tld: 1.2.3.4.
Missing reverse record(s) for address(es): 1.2.3.4.
Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub
[try 1]: Forwarding 'host_mod' to json server
'https://ipa2.seconddomain.tld/ipa/session/json'
Could not update DNS SSHFP records.
Only clients joined to zone B exhibit this behaviour.
What do I need to add to my freeipa DNS configuration to make this work properly?
Thanks!
--
Ranbir