Side note:
You can manage AD integrated DNS from unix host easily with just 'nsupdate -g' - so theoretically (ok I undestand you have to have a proper
Kerberos TGT...) IPA client could be able to autoconfigure (create all the necessary SRV records) AD DNS, too. Not sure if we even wanted
that. but theoretically, it should be possible.
Ondrej
On 03/07/2012 08:11 PM, Simo Sorce wrote:
On Wed, 2012-03-07 at 13:38 -0500, Sylvain Angers wrote:
Hello All,
We are facing the same difficulties here with coexistence with
Microsoft AD
on the same network
Whenever I run ipa-client-install
# ipa-client-install --server=server.abcd.ca --domain=abcd.ca
--realm=UNIX
DNS domain 'unix' is not configured for automatic KDC address lookup.
KDC address will be set to fixed value.
Discovery was successful!
Hostname: client.abcd.ca
Realm: UNIX
DNS Domain: abcd.ca
IPA Server: server.abcd.ca
BaseDN: dc=unix
is abcd.ca your windows domain ?
although we support specifying a realm that is not identical to the DNS
domain I strongly suggest you do not do so if you do not want to
experience some trouble and to assing to your UNIX domain it's own DNS
domain that matches the realm. If you do not do that things can still
work, but not w/o some minor annoyances.
For example discovery will fail as you find out because the DNS domain
is owned by the AD realm. You also have to make sure you properly map
realms to domains correctly in various clients.
Simo.
The information contained in this e-mail and in any attachments is confidential
and is designated solely for the attention of the intended recipient(s). If you
are not an intended recipient, you must not use, disclose, copy, distribute or
retain this e-mail or any part thereof. If you have received this e-mail in
error, please notify the sender by return e-mail and delete all copies of this
e-mail from your computer system(s).
Please direct any additional queries to: communicati...@s3group.com.
Thank You.
Silicon and Software Systems Limited. Registered in Ireland no. 378073.
Registered Office: South County Business Park, Leopardstown, Dublin 18
_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users
