[Freeipa-users] DNSSEC A, AAAA Records

Martin Basti mbasti at redhat.com
Fri Jun 10 08:12:50 UTC 2016



On 10.06.2016 09:09, Günther J. Niederwimmer wrote:
> Hello,
>
> can any help me to clear a question for DNSSEC, NSEC3
>
> I have a domain created with bind and DNSSEC and NSEC3 I test this Domain and
> other, not my Domain with
>
> http://dnsviz.net/d/esslmaier.at/dnssec/
>
> This site from Verisign tell me, I have all Secure and also the A, AAAA
> Records
>
> FreeIPA 4.3.1 Centos 7.2
>
> But when I test my IPA created domain
> http://dnsviz.net/d/4gjn.com/dnssec/
>
> I miss the A, AAAA Records
>
> can this be correct ?
>
> Thanks for a answer

Hello,
do you have configured A and AAAA records in zone apex of '4gjn.com'?

I can `dig +dnssec ipa.4gjn.com. A`  with DNSSEC results but for `dig 
+dnssec 4gjn.com. A` , it looks like there is no A/AAAA records.

Can you provide output of the `ipa dnsrecord-show 4gjn.com. @` ?

Martin




More information about the Freeipa-users mailing list