I have freeipa running with two DNS zones: one I configured during the
initial install and a second one I added later. This new zone is
obviously still part of the same kerberos realm.
When I join a client in the new DNS zone to the freeipa domain, I see
Failed to update DNS records.
Missing A/AAAA record(s) for host server.seconddomain.tld: 188.8.131.52.
Missing reverse record(s) for address(es): 184.108.40.206.
Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_ecdsa_key.pub
Adding SSH public key from /etc/ssh/ssh_host_ed25519_key.pub
[try 1]: Forwarding 'host_mod' to json server
Could not update DNS SSHFP records.
Only clients joined to zone B exhibit this behaviour.
What do I need to add to my freeipa DNS configuration to make this work properly?