Failed to add multiple zone-transfer addresses in IdM managed DNS zone
Issue
- Need to add multiple zone-transfer IP addresses in IdM managed DNS zone to:
192.168.10.20and192.168.30.40 - Followed example in Product Documentation1 to enable zone-transfer with command line:
ipa dnszone-mod example.com. --allow-transfer=192.168.10.20;192.168.30.40 -
Only one IP address was added successfully
# ipa dnszone-mod example.com. --allow-transfer=192.168.10.20;192.168.30.40 Zone name: example.com. Active zone: TRUE Authoritative nameserver: ipa.example.com. Administrator e-mail address: hostmaster.example.com. SOA serial: 1602066022 SOA refresh: 3600 SOA retry: 900 SOA expire: 1209600 SOA minimum: 3600 Allow query: any; Allow transfer: 192.168.10.20; <=== Only one IP address was added -
Multiple IP addresses can be added via Web UI successfully
-
Linux Domain Identity, Authentication, and Policy Guide: 33.4.3. Enabling Zone Transfers ↩︎
Environment
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Identity Management (IdM) / FreeIPA
- ipa-server
- ipa-server-dns
- bind-pkcs11 / named-pkcs11.service
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.