Greetings,
I have a set-up that has many Freeipa servers throughout various regions,
acting as DNS servers throughout these regions.
To set the stage, I, along with my colleagues, are competent in FreeIPA
administration, but we're not ldap experts. We've had a couple scenarios
wherein changes to our IPA environment (adding/removing a host, additions
of zones, etc) have caused momentary DNS outages.
In addition, we are concerned about LDAP issues that could cause named to
not function - we've already gone through an isolated incident where slapd
took a significant amount of time to start, during which that host was
running named, but was not serving any addresses.
For these and many more reasons we'd feel more comfortable running named
from flat files that pull DNS updates from FreeIPA.
My question to the group is whether there will be any impacts to the
FreeIPA system if we convert named to use files rather than bind as a
backend. Ideally, we'd like to avoid creating new machines to function as
DNS servers and just convert the existing FreeIPA servers to use files for
named.
Any comments or questions on the above approach would be welcome - thanks
for your time.
Best,
Jon
Show replies by date