to complete information
the named-pkcs11 service is started so it is not a problem to resolv host
Here I see that the rest api is down to my understanding
----
# systemctl status named-pkcs11
● named-pkcs11.service - Berkeley Internet Name Domain (DNS) with native PKCS#11
Loaded: loaded (/usr/lib/systemd/system/named-pkcs11.service; disabled;
vendor preset: disabled)
Active: active (running) since Thu 2021-11-04 10:11:36 CET; 1min 55s ago
Main PID: 8585 (named-pkcs11)
Tasks: 7 (limit: 23441)
Memory: 59.6M
CGroup: /system.slice/named-pkcs11.service
└─8585 /usr/sbin/named-pkcs11 -u named -c /etc/named.conf
nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0
74.125.47.11#63950 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN'
denied
nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0
74.125.181.4#45716 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN'
denied
nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0
172.253.248.34#61146 (ipa.somewhere.com): query (cache)
'ipa.somewhere.com/A/IN' denied
nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0
172.217.41.200#37484 (ipa.somewhere.com): query (cache)
'ipa.somewhere.com/A/IN' denied
nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0
74.125.73.84#43464 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN'
denied
nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80ebf40
172.253.215.71#43628 (ipa.somewhere.com): query (cache)
'ipa.somewhere.com/A/IN' denied
nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0
74.125.47.12#50980 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN'
denied
nov. 04 10:13:29 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0
74.125.47.149#38369 (ipa.somewhere.com): query (cache) 'ipa.somewhere.com/A/IN'
denied
nov. 04 10:13:31 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80dd4e0
74.125.181.1#38708 (_ldap._tcp.somewhere.com): query (cache)
'_ldap._tcp.somewhere.com/SRV/IN' denied
nov. 04 10:13:31 ipa.somewhere.com named-pkcs11[8585]: client @0x7f3ae80ebf40
172.217.41.200#62570 (_ldap._tcp.somewhere.com): query (cache)
'_ldap._tcp.somewhere.com/SRV/IN' denied
[root@ipa ~]# dig ipa.somewhere.com
; <<>> DiG 9.11.26-RedHat-9.11.26-4.el8_4 <<>> ipa.somewhere.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 22587
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: ec506fda56122893ea1f0c686183a448049b2db129924d5d (good)
;; QUESTION SECTION:
;ipa.somewhere.com. IN A
;; Query time: 2 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: jeu. nov. 04 10:13:44 CET 2021
;; MSG SIZE rcvd: 80
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
