Yes, this is it. Thanks, the UI work now.

But i have an other problem with the dnssec-service.

I get this message:

Jan 10 10:56:27 hn-dlp /usr/libexec/ipa/ipa-ods-exporter[10276]: new replica keys in LDAP: {'0xbb…', '0x8c…'}

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: Traceback (most recent call last):

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File "/usr/libexec/ipa/ipa-ods-exporter", line 701, in <module>

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:    ldap2master_replica_keys_sync(ldapkeydb, localhsm)

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File "/usr/libexec/ipa/ipa-ods-exporter", line 304, in ldap2master_replica_keys_sync

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:    localhsm.import_public_key(new_key_ldap, new_key_ldap['ipapublickey'])

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File "/usr/lib/python3.6/site-packages/ipaserver/dnssec/localhsm.py", line 183, in import_public_key

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:    h = self.p11.import_public_key(**params)

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:  File "/usr/lib/python3.6/site-packages/ipaserver/p11helper.py", line 1451, in import_public_key

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]:    raise DuplicationError("Public key with same ID already exists")

Jan 10 10:56:27 hn-dlp ipa-ods-exporter[10276]: ipaserver.p11helper.DuplicationError: Public key with same ID already exists

Best regards

Kay Jeschonneck