16.2. Resolving issues if the client installation fails to update DNS records

Procedure

1. Ensure that dynamic updates for the DNS zone the client is in are enabled:

   [user@server ~]$ ipa dnszone-mod idm.example.com. --dynamic-update=TRUE

2. Ensure that the IdM server running the DNS service has port 53 opened for both TCP and UDP protocols.

   [user@server ~]$ sudo firewall-cmd --permanent --add-port=53/tcp --add-port=53/udp
   [sudo] password for user:
   success
   [user@server ~]$ firewall-cmd --runtime-to-permanent
   success

3. Use the grep utility to retrieve the contents of nsupdate commands from /var/log/client-install.log to see which DNS record updates are failing.

   [user@server ~]$ sudo grep nsupdate /var/log/ipaclient-install.log