Hi all,
A new KSK has been auto-generated, and it's transitioned through
'published' and is now sitting in the 'ready' state, but does not appear
as a DNSKEY record on the zone.  I can see that ods-enforcerd has picked
up the state change correctly and logged a DSChanged event with the
correct output for the new DNSKEY record, and it appears as expected in
localhsm, but is not published on the zone.

Running FreeIPA 4.3.0-1.fc23, anyone got pointers on how to proceed with
the rollover?

Cheers,
Pete
Konsole output
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to