Am Donnerstag, 8. Juli 2021, 22:44:02 CEST schrieb Lars Vogdt:
Am July 8, 2021 6:07:59 PM UTC schrieb Christian Boltz:
Note 1: infra.opensuse.org is currently still on FreeIPA. Can be moved at any time. I'm just waiting for *your* go here.
IMHO you can move it so that we have everything in one place.
Just looked at FreeIPA again - there are a few more zones and reverse zones left. Feel free to move all of them to chip.
The *.vpn.infra.o.o zones are still living on freeipa.i.o.o, and not available on chip. (Note: you'll probably need to update your script to create VPN users when moving these zones.)
Right and wrong at the same time ;-)
*vpn.infra.o.o domains are "maintained" at scar. There is already a script, that creates the DNS entries (tcp,udp,general & reverse) every day from the VPN setup. So far, all other DNS servers just forward requests for these domains to scar. I would not touch this (unless someone takes over), as it "just works". :-)
Oh, I wasn't aware of this detail ;-) and had guessed that you somehow automagically update these zones in FreeIPA. Since you dropped the (probably outdated) *.vpn.i.o.o zones from FreeIPA in the meantime and it still works, my guess was obviously wrong.
Anyway, feel free to keep vpn.i.o.o on scar.