[Freeipa-users] Re: dns suddenly not happy with DNSSEC

[lejeczek]

On 29/05/2023 15:36, lejeczek via FreeIPA-users wrote:
>  Hi guys.
>
>  That is on first master which was happy for short while 
>  and then suddenly:
>
>  ...
>  29-May-2023 12:38:23.597 info: client @0x7f6484005538 
>  127.0.0.1#43235 (onet.pl): query failed (broken trust 
>  chain) for onet.pl/IN/A at ../../../lib/ns/query.c:7355
>  29-May-2023 12:39:08.518 info: client @0x7f64b0080088 
>  127.0.0.1#48441 (onet.pl): query failed (broken trust 
>  chain) for onet.pl/IN/A at ../../../lib/ns/query.c:7355
>
>  and that is for any & every query.
>  With given forwards or no forwarders.
>  Time is in sync, network works, everything else seem good 
>  too... and the second master/replica does not complain.
>  What might the issue (beside the obvious)?
>  many thanks, L. 
For those who may see, "suffer" the same issues or just be 
curious - I decided to file a BZ here: 
https://github.com/freeipa/freeipa-container/issues/538
thanks, L.