Is it possible to remove ipa-dns-server?

Solution Verified - Updated -

Environment

  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 7

Issue

The system was installed with integrated DNS.
Need remove the DNS role and use external DNS.

Resolution

There is no specific method to uninstall ipa-dns-server from the command line. Even when the command ipa-server-install --uninstall is executed, it does not perform a full cleanup process that includes removing DNS entries and other service principals. This is because the entire database becomes irrelevant/invalid.

The DNS role once installed in the first node can not be abandoned or removed, even installing new replicas without DNS the first node will be in charge of DNS names resolution, therefore to create a scenario where DNS is external, need re-create the cluster without use the '--setup-dns' on first node and creating the required entries on external DNS as suggested on guide.
Chapter 7. Installing an IdM server: Without integrated DNS, with an external CA as the root CA

  • Component
  • ipa

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments