Hi all,
I get lot's of messages in my log (journalctl -u
named-pkcs11.service -p err ) like these:
Feb 22 09:17:32 ipa.example.com named-pkcs11[8982]: zone
example.com/IN (signed): could not get zone keys for secure
dynamic update
Feb 22
On 22.2.2016 09:36, Winfried de Heiden wrote:
> Hi all,
>
> I get lot's of messages in my log (journalctl -u named-pkcs11.service -p err
> )
> like these:
>
> Feb 22 09:17:32 ipa.example.com named-pkcs11[8982]: zone example.com/IN
> (signed): could not get zone keys for secure dynamic update
Hi all,
Following
http://www.freeipa.org/page/Troubleshooting#DNSSEC_signing_does_not_work
was most usefull, It turned out the package
"freeipa-server-dns"was missing. Strange, I am running DNS,
but...:
I upgraded form Fedora 2
On 22.2.2016 14:02, Winfried de Heiden wrote:
> Hi all,
>
> Following
> http://www.freeipa.org/page/Troubleshooting#DNSSEC_signing_does_not_work was
> most usefull, It turned out the package "freeipa-server-dns"was missing.
> Strange, I am running DNS, but...:
>
> * I upgraded form Fedora 22
Hi all,
And so did I, following
http://www.freeipa.org/page/Troubleshooting#DNSSEC_master_is_not_configured:
ipa-dns-install --dnssec-master
The log file for this installation can be found in
/var/log/ipaserver-install.log
On 23.2.2016 14:18, Winfried de Heiden wrote:
> Hi all,
>
> And so did I, following
> http://www.freeipa.org/page/Troubleshooting#DNSSEC_master_is_not_configured:
>
> ipa-dns-install --dnssec-master
>
> The log file for this installation can be found in
> /var/log/ipaserver-install.log
> =
Hi all,
ipa-dns-install --dnssec-master --force did the trick, this is
looking much better. I'l do some more tests later. For now, thanks
a lot!
Winny
Op 23-02-16 om 14:52 schreef Petr
Spacek:
On 23.2.2016 14:18