Failed to add multiple zone-transfer addresses in IdM managed DNS zone

Solution Verified - Updated -

Issue

  • Need to add multiple zone-transfer IP addresses in IdM managed DNS zone to: 192.168.10.20 and 192.168.30.40
  • Followed example in Product Documentation1 to enable zone-transfer with command line: ipa dnszone-mod example.com. --allow-transfer=192.168.10.20;192.168.30.40
  • Only one IP address was added successfully

    # ipa dnszone-mod example.com. --allow-transfer=192.168.10.20;192.168.30.40
    Zone name: example.com.
    Active zone: TRUE
    Authoritative nameserver: ipa.example.com.
    Administrator e-mail address: hostmaster.example.com.
    SOA serial: 1602066022
    SOA refresh: 3600
    SOA retry: 900
    SOA expire: 1209600
    SOA minimum: 3600
    Allow query: any;
    Allow transfer: 192.168.10.20;             <=== Only one IP address was added
    
  • Multiple IP addresses can be added via Web UI successfully


  1. Linux Domain Identity, Authentication, and Policy Guide: 33.4.3. Enabling Zone Transfers 

Environment

  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Identity Management (IdM) servers (FreeIPA)
    • ipa-server
    • ipa-server-dns
    • bind-pkcs11 / named-pkcs11.service

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In