to complete information
the named-pkcs11 service is started so it is not a problem to resolv host Here I see that the rest api is down to my understanding ---- # systemctl status named-pkcs11 ● named-pkcs11.service - Berkeley Internet Name Domain (DNS) with native PKCS#11 Loaded: loaded (/usr/lib/systemd/system/named-pkcs11.service; disabled; vendor preset: disabled) Active: active (running) since Thu 2021-11-04 10:11:36 CET; 1min 55s ago Main PID: 8585 (named-pkcs11) Tasks: 7 (limit: 23441) Memory: 59.6M CGroup: /system.slice/named-pkcs11.service └─8585 /usr/sbin/named-pkcs11 -u named -c /etc/named.conf nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0 74.125.47.11#63950 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN' denied nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0 74.125.181.4#45716 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN' denied nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0 172.253.248.34#61146 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN' denied nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0 172.217.41.200#37484 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN' denied nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0 74.125.73.84#43464 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN' denied nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80ebf40 172.253.215.71#43628 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN' denied nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0 74.125.47.12#50980 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN' denied nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0 74.125.47.149#38369 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN' denied nov. 04 10:13:31 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0 74.125.181.1#38708 (_ldap._tcp.somewhere.com): query (cache) '_ldap._tcp.somewhere.com/SRV/IN' denied nov. 04 10:13:31 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80ebf40 172.217.41.200#62570 (_ldap._tcp.somewhere.com): query (cache) '_ldap._tcp.somewhere.com/SRV/IN' denied [root@ipa ~]# dig ipa.somewhere.com ; <<>> DiG 9.11.26-RedHat-9.11.26-4.el8_4 <<>> ipa.somewhere.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 22587 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ; COOKIE: ec506fda56122893ea1f0c686183a448049b2db129924d5d (good) ;; QUESTION SECTION: ;ipa.somewhere.com. IN A ;; Query time: 2 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: jeu. nov. 04 10:13:44 CET 2021 ;; MSG SIZE rcvd: 80 _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure