Current FreeIPA interface allows users to create forward zone configuration which is not valid/effective. Please see [ticket 141 comment #3]]([https://fedorahosted.org/bind-dyndb-ldap/ticket/141#comment:3|bind-dyndb-ldap) for details.
FreeIPA interface could detect this situation and warn (or possibly refuse to add zone).
The check should be done in ipa dnsforwardzone-add command and ipa dnsrecord-* commands where related NS records can be removed.
ipa dnsforwardzone-add
ipa dnsrecord-*
4.1.2 was released.
master:
ipa-4-1:
Metadata Update from @pspacek: - Issue assigned to mbasti - Issue set to the milestone: FreeIPA 4.1.3
Login to comment on this ticket.