SPS DNS Resolution Issue for New Domain Despite Adding DNS Server

I’m using One Identity PAM (SPP + SPS) and added a second Active Directory domain to the environment. SPP can successfully discover servers and accounts in this new domain, but SPS is unable to resolve hostnames for the newly added servers.

Steps I’ve taken so far:

Added the new domain’s DNS suffix under Global DNS Suffixes.
Configured the DNS server for the new domain as the Secondary DNS server under SPS > Basic Settings > Network > Naming.
The Primary DNS server resolves the first domain correctly.
Used the Name Resolution test tool in SPS, but hostnames from the second domain still fail to resolve.

Question:
What additional configuration is needed to allow SPS to resolve hostnames from multiple domains (each using different DNS servers)?

Thanks in advance for any help.

0 Tawfiq.Ahmad 21 days ago

Hi,

Please refer to this KB about DNS resolution in SPP and similarly in SPS:
https://support.oneidentity.com/kb/4229960/how-does-safeguard-handle-dns-resolution-and-can-it-resolve-separate-dns-domains

Please make sure the primary DNS server is able to handle queries for all other domains, this can be accomplished by setting up DNS conditional forwarders on the DNS server side.

Thanks!
Cancel
Up 0 Down

Reply

Verify Answer

Cancel