Description of problem: I have a dns zone managed by IPA and I'm trying to delegate a zone managed by Active Directory. Delegation doesn't work Version-Release number of selected component (if applicable): bind-dyndb-ldap-1.0.0-0.2.b1.fc15.x86_64 How reproducible: Always Steps to Reproduce: The IPA managed zone is called "corpfbk", and the AD one is "ad.corpfbk". I started by adding the proper glue records: ipa dnsrecord-add corpfbk ns1.ad --a-rec=192.168.3.36 ipa dnsrecord-add corpfbk ns2.ad --a-rec=192.168.3.241 Then I add what I consider should be the zone delegation: ipa dnsrecord-add corpfbk ad --ns-rec=ns1.ad.corpfbk.,ns2.ad.corpfbk. Problem is, IPA DNS can't resolve any host in the ad.corpfbk zone, except ns1 and ns2. Recursion is enabled in named.conf. Actual results: # dig @localhost ad.corpfbk NS +norecurse ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21862 ;; flags: qr aa ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 4 ;; QUESTION SECTION: ;ad.corpfbk. IN NS ;; ANSWER SECTION: ad.corpfbk. 86400 IN NS ns1.ad.corpfbk. ad.corpfbk. 86400 IN NS ns2.ad.corpfbk. ;; AUTHORITY SECTION: corpfbk. 86400 IN NS ipa01.central.corpfbk. corpfbk. 86400 IN NS ipa02.central.corpfbk. ;; ADDITIONAL SECTION: ns1.ad.corpfbk. 86400 IN A 192.168.3.36 ns2.ad.corpfbk. 86400 IN A 192.168.3.241 ipa01.central.corpfbk. 86400 IN A 192.168.3.6 ipa02.central.corpfbk. 86400 IN A 192.168.3.16 Expected results: The ipa dns server response should have no "ANSWER" section, and the "AUTHORITY" section should point to the ad.corpfbk domain and to its nameservers Additional info: freeipa-users tread: https://www.redhat.com/archives/freeipa-users/2012-February/msg00013.html
I've just pushed series of commits to upstream and since http://git.fedorahosted.org/git?p=bind-dyndb-ldap.git;a=commit;h=6b96179255131d693ee372302220a57cb151bbf1 delegation is supported. I will submit update for Fedora soon.
*** Bug 784820 has been marked as a duplicate of this bug. ***
bind-dyndb-ldap-1.1.0-0.8.a2.fc16 has been submitted as an update for Fedora 16. https://admin.fedoraproject.org/updates/bind-dyndb-ldap-1.1.0-0.8.a2.fc16
bind-dyndb-ldap-1.1.0-0.8.a2.fc15 has been submitted as an update for Fedora 15. https://admin.fedoraproject.org/updates/bind-dyndb-ldap-1.1.0-0.8.a2.fc15
Package bind-dyndb-ldap-1.1.0-0.8.a2.fc15: * should fix your issue, * was pushed to the Fedora 15 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing bind-dyndb-ldap-1.1.0-0.8.a2.fc15' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-1601/bind-dyndb-ldap-1.1.0-0.8.a2.fc15 then log in and leave karma (feedback).
bind-dyndb-ldap-1.1.0-0.8.a2.fc15 has been pushed to the Fedora 15 stable repository. If problems still persist, please make note of it in this bug report.
bind-dyndb-ldap-1.1.0-0.8.a2.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report.