Bug 1672238
| Summary: | The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain records [rhel-7.6.z] | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | RAD team bot copy to z-stream <autobot-eus-copy> |
| Component: | ipa | Assignee: | IPA Maintainers <ipa-maint> |
| Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 7.7 | CC: | frenaud, myusuf, pvoborni, rcritten, tscherf |
| Target Milestone: | rc | Keywords: | Regression, ZStream |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | ipa-4.6.4-10.el7_6.3 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1533228 | Environment: | |
| Last Closed: | 2019-03-13 18:45:54 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1533228 | ||
| Bug Blocks: | |||
|
Description
RAD team bot copy to z-stream
2019-02-04 10:49:06 UTC
Version: ipa-server-dns-4.6.4-10.el7_6.3.noarch ipa-server-4.6.4-10.el7_6.3.x86_64 Steps: 1. Install IPA master and add dnsforward zone $ ipa dnsforwardzone-add forward.test --skip-overlap-check --forwarder xx.xx.xx.xx 2. Install ipa-client (on replica.forward.test) with dns zone added in step1 $ ipa-client-install -U --domain testrelm.test --realm TESTRELM.TEST -p admin -w Secret123 --server master.testrelm.test --hostname replica.forward.test 3. Promote client to be a replica $ ipa-replica-install --principal admin --admin-password Secret123 --setup-dns --forwarder xx.xx.xx.xx -U Actual result: On master: [root@master ~]# ipa dnsforwardzone-add forward.test --skip-overlap-check --forwarder xx.xx.xx.xx Server will check DNS forwarder(s). This may take some time, please wait ... ipa: WARNING: DNS server xx.xx.xx.xx: query 'forward.test. SOA': The DNS query name does not exist: forward.test.. Zone name: forward.test. Active zone: TRUE Zone forwarders: xx.xx.xx.xx Forward policy: first On replica: [root@replica ~]# ipa-client-install -U --domain testrelm.test --realm TESTRELM.TEST -p admin -w Secret123 --server master.testrelm.test --hostname replica.forward.test WARNING: ntpd time&date synchronization service will not be configured as conflicting service (chronyd) is enabled Use --force-ntpd option to disable it and force configuration of ntpd Client hostname: replica.forward.test Realm: TESTRELM.TEST DNS Domain: testrelm.test IPA Server: master.testrelm.test BaseDN: dc=testrelm,dc=test [..] Configuring testrelm.test as NIS domain. Client configuration complete. The ipa-client-install command was successful [root@replica ~]# ipa-replica-install --principal admin --admin-password Secret123 --setup-dns --forwarder xx.xx.xx.xx -U WARNING: conflicting time&date synchronization service 'chronyd' will be disabled in favor of ntpd Checking DNS forwarders, please wait ... Run connection check to master Connection check OK Configuring NTP daemon (ntpd) [1/4]: stopping ntpd [2/4]: writing configuration [3/4]: configuring ntpd to start on boot [4/4]: starting ntpd Done configuring NTP daemon (ntpd). [..] Done configuring DNS key synchronization service (ipa-dnskeysyncd). Restarting ipa-dnskeysyncd Restarting named Updating DNS system records Global DNS configuration in LDAP server is empty You can use 'dnsconfig-mod' command to set global DNS options that would override settings in local named.conf files Replica installation succeed. Based on above observation, marking the bug verified. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:0508 |