Re: [Freeipa-users] Removing DNS component

2016-12-08 Thread Brian Candler
On 08/12/2016 17:05, Martin Basti wrote: I suggest to keep DNS tree there and all permissions, just remove all zones using IPA API and disable DNS service and dnssyncd service in LDAP, because removing DNS completely is unsupported and untested dn: cn=DNS,cn=vm-028.ipa.test,cn=masters,cn=ipa,c

Re: [Freeipa-users] Removing DNS component

2016-12-08 Thread Martin Basti
On 08.12.2016 12:01, Brian Candler wrote: FreeIPA (4.2.0) was installed with the DNS component enabled, but I want to pull this out. Is it possible to remove it and clean up the records which were already there? e.g. is it sufficient just to delete everything under cn=dns,dc=example,dc=com

[Freeipa-users] Removing DNS component

2016-12-08 Thread Brian Candler
FreeIPA (4.2.0) was installed with the DNS component enabled, but I want to pull this out. Is it possible to remove it and clean up the records which were already there? e.g. is it sufficient just to delete everything under cn=dns,dc=example,dc=com ? I notice there are bunch of permissions e