Please always include ipa-users list when replying. On 6.1.2016 11:48, Devin wrote: > Jan 06 01:37:45 idm.servers.lnx.ninja named-pkcs11[5524]: zone > lnx.ninja/IN: NS 'idm.servers.lnx.ninja' has no address records (A or AAAA) > Jan 06 01:37:45 idm.servers.lnx.ninja named-pkcs11[5524]: zone > lnx.ninja/IN: not loaded due to errors. > Jan 06 01:37:45 idm.servers.lnx.ninja named-pkcs11[5524]: zone > servers.lnx.ninja/IN: loaded serial 1452044265
Apparently the zone lnx.ninja does not contain any (A or AAAA) records for name idm.servers.lnx.ninja listed in NS record. You need to fix this (add so-called glue record) otherwise BIND will not load that zone. I hope this helps. -- Petr^2 Spacek -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project