[Freeipa-users] DNSSEC A, AAAA Records

Martin Basti mbasti at redhat.com
Fri Jun 10 08:15:54 UTC 2016



On 10.06.2016 10:12, Martin Basti wrote:
>
>
> On 10.06.2016 09:09, Günther J. Niederwimmer wrote:
>> Hello,
>>
>> can any help me to clear a question for DNSSEC, NSEC3
>>
>> I have a domain created with bind and DNSSEC and NSEC3 I test this 
>> Domain and
>> other, not my Domain with
>>
>> http://dnsviz.net/d/esslmaier.at/dnssec/
>>
>> This site from Verisign tell me, I have all Secure and also the A, AAAA
>> Records
>>
>> FreeIPA 4.3.1 Centos 7.2
>>
>> But when I test my IPA created domain
>> http://dnsviz.net/d/4gjn.com/dnssec/
>>
>> I miss the A, AAAA Records
>>
>> can this be correct ?
>>
>> Thanks for a answer
>
> Hello,
> do you have configured A and AAAA records in zone apex of '4gjn.com'?
>
> I can `dig +dnssec ipa.4gjn.com. A`  with DNSSEC results but for `dig 
> +dnssec 4gjn.com. A` , it looks like there is no A/AAAA records.
>
> Can you provide output of the `ipa dnsrecord-show 4gjn.com. @` ?
>
> Martin
>

http://dnsviz.net/d/ipa.4gjn.com/dnssec/

Visualized here, thank you for page I didn't know about it before, I 
like it :) .

Martin




More information about the Freeipa-users mailing list