Re: [Freeipa-users] could not get zone keys for secure dynamic update

2016-02-23 Thread Winfried de Heiden
Hi all, ipa-dns-install --dnssec-master --force did the trick, this is looking much better. I'l  do some more tests later. For now, thanks a lot! Winny Op 23-02-16 om 14:52 schreef Petr Spacek: On 23.2.2016

Re: [Freeipa-users] could not get zone keys for secure dynamic update

2016-02-23 Thread Petr Spacek
On 23.2.2016 14:18, Winfried de Heiden wrote: > Hi all, > > And so did I, following > http://www.freeipa.org/page/Troubleshooting#DNSSEC_master_is_not_configured: > > ipa-dns-install --dnssec-master > > The log file for this installation can be found in > /var/log/ipaserver-install.log >

Re: [Freeipa-users] could not get zone keys for secure dynamic update

2016-02-22 Thread Petr Spacek
On 22.2.2016 14:02, Winfried de Heiden wrote: > Hi all, > > Following > http://www.freeipa.org/page/Troubleshooting#DNSSEC_signing_does_not_work was > most usefull, It turned out the package "freeipa-server-dns"was missing. > Strange, I am running DNS, but...: > > * I upgraded form Fedora

Re: [Freeipa-users] could not get zone keys for secure dynamic update

2016-02-22 Thread Winfried de Heiden
Hi all, Following http://www.freeipa.org/page/Troubleshooting#DNSSEC_signing_does_not_work  was most usefull, It turned out the package "freeipa-server-dns"was missing. Strange, I am running DNS, but...: I upgraded form Fedora

Re: [Freeipa-users] could not get zone keys for secure dynamic update

2016-02-22 Thread Petr Spacek
On 22.2.2016 09:36, Winfried de Heiden wrote: > Hi all, > > I get lot's of messages in my log (journalctl -u named-pkcs11.service -p err > ) > like these: > > Feb 22 09:17:32 ipa.example.com named-pkcs11[8982]: zone example.com/IN > (signed): could not get zone keys for secure dynamic update

[Freeipa-users] could not get zone keys for secure dynamic update

2016-02-22 Thread Winfried de Heiden
Hi all, I get lot's of messages in my log (journalctl -u named-pkcs11.service  -p err ) like these: Feb 22 09:17:32 ipa.example.com named-pkcs11[8982]: zone example.com/IN (signed): could not get zone keys for secure dynamic update Feb