#5801 ipa-server-install: error: option --forwarder: invalid IP address 127.0.0.11: cannot use loopback IP address when using Docker embedded DNS server
Closed: fixed Opened by adelton.

Docker 1.10 introduced embedded DNS server.

From https://docs.docker.com/engine/userguide/networking/dockernetworks/#docker-embedded-dns-server:

Docker daemon runs an embedded DNS server to provide automatic service discovery for containers connected to user defined networks. Name resolution requests from the containers are handled first by the embedded DNS server. If the embedded DNS server is unable to resolve the request it will be forwarded to any external DNS servers configured for the container. To facilitate this when the container is created, only the embedded DNS server reachable at 127.0.0.11 will be listed in the container’s resolv.conf file.

Therefore, 127.0.0.11 sounds perfect for {{{--forwarder}}} settings if the IPA server in container is supposed to be able to resolve hostnames outside of the container environments. However, attempt to use

ipa-server-install [...] --forwarder=127.0.0.11

in the container results in

ipa-server-install: error: option --forwarder: invalid IP address 127.0.0.11: cannot use loopback IP address

Oh yes, we should issue warning and let the user proceed.

4.4.0 was released, moving open tickets to 4.4.1

Moving to next major version. Fixing this bug is not critical in stabilization release.

Metadata Update from @adelton:
- Issue assigned to mbasti
- Issue set to the milestone: FreeIPA 4.5

Metadata Update from @mbasti:
- Issue close_status updated to: None
- Issue set to the milestone: FreeIPA 4.5.1 (was: FreeIPA 4.5)

Metadata Update from @mbasti:
- Issue set to the milestone: FreeIPA 4.5.2 (was: FreeIPA 4.5.1)

FreeIPA 4.5.1 has been released, moving to FreeIPA 4.5.2 milestone

Metadata Update from @tkrizek:
- Issue set to the milestone: FreeIPA 4.5.3 (was: FreeIPA 4.5.2)

Metadata Update from @fbarreto:
- Issue assigned to fbarreto (was: mbasti)

PR: https://github.com/freeipa/freeipa/pull/903

Metadata Update from @tkrizek:
- Issue set to the milestone: FreeIPA 4.5.4 (was: FreeIPA 4.5.3)

Metadata Update from @pvoborni:
- Issue tagged with: containers

Metadata Update from @tkrizek:
- Issue set to the milestone: FreeIPA 4.5.5 (was: FreeIPA 4.5.4)

master:

  • 405da071d109ec683676d56fac3bccfc4606535e Warning the user when using a loopback IP as forwarder

ipa-4-6:

  • 29e1f264740d9f0eee47441f1a9b61f2a6abfb7a Warning the user when using a loopback IP as forwarder

ipa-4-5:

  • 2f99d611fd6b07d56379e5e7ca4b0a0ef7aa31d2 Warning the user when using a loopback IP as forwarder

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata