To start off, my experience lies in networking (Cisco) and Windows. That being said, I have been set off on a project to design a multi-site FreeIPA installation. I have single site FreeIPA without a problem. Where I am running into problems is multi-site.
Let's say that I have three sites:
- site1.example.com
- site2.example.com
- site3.example.com
I want to have as my overarching realm example.com. Do I need to have an IPA server to run example.com?
When I created the first IPA server, ipa.site1.example.com, and used the example.com realm name, no dns zone was created for example.com. I only have a dns zone for site1.example.com.
The documentation for realms and dns zones seems to be next to nonexistent (or I am just looking in the wrong direction). If anyone has experience with this set up, or can point me in the right direction, I would appreciate it.