Ok I have pointed the domain to my IP address (also setup DDNS with the registrar). Howevver BIND still fails.
Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: starting BIND 9.11.4-P2-RedHat-9.11.4-17.P2.el8_0.1 (Extended Support Version) <id:7107deb> Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: running on Linux x86_64 4.18.0-80.11.2.el8_0.x86_64 #1 SMP Tue Sep 24 11:32:19 UTC 2019 Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: built with '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--disable-dependency-tracking' '--prefix=/usr' '--exec-pref> Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: running as: named-pkcs11 -u named -c /etc/named.conf Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: compiled by GCC 8.2.1 20180905 (Red Hat 8.2.1-3) Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: compiled with libxml2 version: 2.9.7 Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: linked to libxml2 version: 20907 Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: compiled with zlib version: 1.2.11 Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: linked to zlib version: 1.2.11 Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: threads support is enabled Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: ---------------------------------------------------- Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: BIND 9 is maintained by Internet Systems Consortium, Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: Inc. (ISC), a non-profit 501(c)(3) public-benefit Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: corporation. Support and training for BIND 9 are Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: available at https://www.isc.org/support Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: ---------------------------------------------------- Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: adjusted limit on open files from 4096 to 1048576 Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: found 1 CPU, using 1 worker thread Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: using 1 UDP listener per interface Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: using up to 21000 sockets Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: Configuration.cpp(94): Missing log.level in configuration. Using default value: INFO Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: ObjectStore.cpp(59): Failed to enumerate object store in /var/lib/ipa/dnssec/tokens Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: SoftHSM.cpp(507): Could not load the object store Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: initializing DST: PKCS#11 initialization failed Nov 14 20:46:28 freeipa01.asm.caprica.space named-pkcs11[23802]: exiting (due to fatal error) Nov 14 20:46:28 freeipa01.asm.caprica.space systemd[1]: named-pkcs11.service: Control process exited, code=exited status=1 Nov 14 20:46:28 freeipa01.asm.caprica.space systemd[1]: named-pkcs11.service: Failed with result 'exit-code'. Nov 14 20:46:28 freeipa01.asm.caprica.space systemd[1]: Failed to start Berkeley Internet Name Domain (DNS) with native PKCS#11. -- Subject: Unit named-pkcs11.service has failed -- Defined-By: systemd -- Support: https://access.redhat.com/support _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org