# FreeIPA configuration help **URL:** \ **Category:** Rocky Linux Help & Support\ **Created:** [May 17, 2025, 8:36pm UTC](https://forums.rockylinux.org/t/freeipa-configuration-help/18487 "2025-05-17T20:36:50Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![anand](https://avatars.discourse-cdn.com/v4/letter/a/ecd19e/32.png) [@anand](https://forums.rockylinux.org/u/anand)\ **Post date:** [May 17, 2025, 8:36pm UTC](https://forums.rockylinux.org/t/freeipa-configuration-help/18487/1 "2025-05-17T20:36:50Z")
Hi to all the experts I need help After setting up FreeIPA server how to configure DNS forward (A records) & reverse (PTR records) automatically if any number of clients are joined to this FreeIPA server? While settting up the FreeIPA server, I had used “ipa-server-install --setup-dns” to setup DNS. Also when I run “ipa dnszone-show [mydomain.com](http://mydomain.com)” I see see Dynamic update: TRUE. On the client side I ran this “ipa-client-install --mkhomedir” & it got installed but it does not seem to auto update the DNS forward & revserse zones/records on the server for the client From server I cannot do nslookup to client IP or its host fqdn both fail. But if from client if I do nslookup to server that works. Any idea why its happening? Can any please suggest & help. Ping also works from both sides Thanks ---
**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\ **Post date:** [May 17, 2025, 8:54pm UTC](https://forums.rockylinux.org/t/freeipa-configuration-help/18487/2 "2025-05-17T20:54:57Z")
Welcome to the forums. I would encourage you to look at the ipa-client-install logs at: `/var/log/ipaclient-install.log` as it can give you a hint as to why the entries were not made. On the IPA server itself, the bind logs can give a better indicator (most common is `updated failed: rejected by secure update`). A DNS entry is normally added under these conditions: - `--enable-dns-updates` is set - `--ip-address` is set - `--all-ip-addresses` is set - The client hostname DNS lookup fails In most common situations, the very last scenario above is what happens. I would make sure that the following is true on your client(s) before enrolling: - Host name should be fully qualified - When you run `hostname` it should have your domain. e.g. `host.mydomain.com` - Set your hostname with hostnamectl set-hostname if the above is not the case - If this client has a subdomain, you must have that subdomain as a zone in IPA, e.g. `host.sub.mydomain.com` - Use `ipa dnszone-add` to add a zone. - If the hostname is indeed correct, then you can try to set `/etc/hosts` to have an entry for your client before using `ipa-client-install` - Also consider using `--enable-dns-updates` and/or using the `--ip-address` flag. You can still add the entries manually after the enrollment. ```auto # Ensure A and PTR records are synced ipa dnsconfig-mod --allow-sync-ptr=true # Add the record ipa dnsrecord-add mydomain.com hostname --a-ip-address=x.x.x.x ``` Hope this helps. ---
**Author:** ![anand](https://avatars.discourse-cdn.com/v4/letter/a/ecd19e/32.png) [@anand](https://forums.rockylinux.org/u/anand)\ **Post date:** [May 18, 2025, 8:26am UTC](https://forums.rockylinux.org/t/freeipa-configuration-help/18487/3 "2025-05-18T08:26:30Z")
Hi, Let me provide the steps I have done to configure FreeIPA server \*Server side installation & configuration 1. /etc/resolv.conf # Generated by NetworkManager search freeipaserver.local.dom nameserver 127.0.0.1 1. /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 172.16.3.2 vmrock19.freeipaserver.local.dom vmrock19 Command ran to install server :- ipa-server-install --setup-dns \*Client Side installation & configuration 1. /etc/resolv.conf nameserver 172.16.3.2 options edns0 trust-ad search freeipaserver.local.dom 1. /etc/hosts #127.0.0.1 localhost #127.0.1.1 vmubun20 172.16.3.2 vmrock19.freeipaserver.local.dom vmrock19 172.16.3.3 vmubun20.freeipaserver.local.dom vmubun20 # The following lines are desirable for IPv6 capable hosts ::1 ip6-localhost ip6-loopback fe00::0 ip6-localnet ff00::0 ip6-mcastprefix ff02::1 ip6-allnodes ff02::2 ip6-allrouters Command ran to install client :- ipa-client-install --mkhomedir --enable-dns-updates Client installs successfully but it fails to register the the DNS in the IPA server automatically What works :- From client to server 1. nslookup vmrock19.freeipaserver.local.dom 2. nslookup 172.16.3.2 What does not works :- From Server to client 1. nslookup vmrock20.freeipaserver.local.dom 2. nslookup 172.16.3.3 I am not sure why its not auto registering the forward & reverse zones of the client, hence it seems the nslookup does not work. If I have multiple clients it will be difficult to manually add DNS for every client ipa dnsconfig-mod --allow-sync-ptr=true this is already set Kindly suggest what to do Thanks ---
**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\ **Post date:** [May 18, 2025, 8:43am UTC](https://forums.rockylinux.org/t/freeipa-configuration-help/18487/4 "2025-05-18T08:43:06Z")
You will need to review `/var/log/ipaclient-install.log` and on the IPA server look at least `/var/log/messages` and look for the bind logs. Those will help indicate where the issue is.