On Fri, 2012-06-22 at 11:25 +0100, Moray Henderson wrote: > Hi all, > > Does Anaconda use DNSSec? I just uncovered an DNSSec/NTP issue on one of my > servers; since I've seen a lot of ntp patches going into Anaconda recently I > thought I'd flag it. > > One server couldn't resolve .org domains - "error (broken trust chain) > resolving '1.centos.pool.ntp.org/A/IN'". Another server with an identical > configuration could. The problem was that the time on the broken server was > "offset 4048.38". When I reset the time, DNS started working. But I had to > do it manually: ntp couldn't set the time from servers in the .ntp.org > domain, because the time was wrong... Thanks a lot for the tip. I haven't seen such a problem yet, but it may appear when more people start using the newui Anaconda with chronyd.service running. Good to know, thanks! -- Vratislav Podzimek <vpodzime@xxxxxxxxxx> _______________________________________________ Anaconda-devel-list mailing list Anaconda-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/anaconda-devel-list
