Chapter 31. Uninstalling the integrated IdM DNS service from an IdM server

Remove integrated DNS from an Identity Management (IdM) server by reinstalling the replica without the DNS role.

While it is possible to add the DNS role to an IdM server using the ipa-dns-install command, IdM does not support removing the DNS role independently as the command does not have an --uninstall option.

This limitation applies to all IdM server roles, that is CA server, KRA server, AD trust agent, and AD trust controller. To remove any of these roles, you must fully decommission the replica and then reinstall it, this time without the unwanted role — for example, without integrated DNS.