The second item is to configure a DNS area for master-slave replication. The info with this area will be periodically copied then from master (IPA server) to slave (AD host).

On IPA server, include an archive and a NS record for the advertising domain:

On AD DC, here two choices.

Initial one would be to configure a forwarder that is worldwide ahead DNS queries to your IPA domain:

The second item is to configure a DNS area for master-slave replication.

Read More