Red Hat Bugzilla – Bug 1440037
When running ipa host-add it fails, with a SERVFAIL which says anwered
Last modified: 2017-08-01 16:33:53 EDT
Description of problem: Error message is wrong Version-Release number of selected component (if applicable): ]# yum list installed | grep ipa ipa-admintools.noarch 4.4.0-14.el7_3.6 @rhel-7-server-rpms ipa-client.x86_64 4.4.0-14.el7_3.6 @rhel-7-server-rpms ipa-client-common.noarch 4.4.0-14.el7_3.6 @rhel-7-server-rpms ipa-common.noarch 4.4.0-14.el7_3.6 @rhel-7-server-rpms ipa-server.x86_64 4.4.0-14.el7_3.6 @rhel-7-server-rpms ipa-server-common.noarch 4.4.0-14.el7_3.6 @rhel-7-server-rpms ipa-server-dns.noarch 4.4.0-14.el7_3.6 @rhel-7-server-rpms libipa_hbac.x86_64 1.14.0-43.el7_3.11 @rhel-7-server-rpms python-iniparse.noarch 0.4-9.el7 @anaconda/7.3 python-ipaddress.noarch 1.0.16-2.el7 @rhel-7-server-rpms python-libipa_hbac.x86_64 1.14.0-43.el7_3.11 @rhel-7-server-rpms python2-ipaclient.noarch 4.4.0-14.el7_3.6 @rhel-7-server-rpms python2-ipalib.noarch 4.4.0-14.el7_3.6 @rhel-7-server-rpms python2-ipaserver.noarch 4.4.0-14.el7_3.6 @rhel-7-server-rpms sssd-ipa.x86_64 1.14.0-43.el7_3.11 @rhel-7-server-rpms How reproducible: [root@idm101 ~]# ipa host-add --random host.example.local ipa: ERROR: All nameservers failed to answer the query host.example.local. IN A: Server 127.0.0.1 UDP port 53 anwered SERVFAIL Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
ipa host-add checks if host is resolvable via DNS. In this case the resolution failed. It indicates a configuration problem. SERVFAIL means error 2: Server failure - The name server was unable to process this query due to a problem with the name server. https://tools.ietf.org/html/rfc1035 What is your DNS configuration? What zones does the IPA server manage? Did you set any DNS forwarders during server installation? Did you set any forward zones? Some info might be in # journalctl -u named-pkcs11.service If you don't care and it is just for testing, then workaround is to use --force option.
The issue is not that the command failed, but the typo in the error, it says "anwered" instead of "answered".
This is bug in DNS python, it is already fixed upstream. To fix this we have to backport patch to RHEL. https://github.com/rthalley/dnspython/commit/84d3c7dffec9c0a380aa5f696ca728879dbe38ac
Per assessment in comment 4, moving to python-dns component.
As we are currently way past the devel phase, asking the respective QE owner if the fix can be included at the current erratum of python-dns for RHEL 7.4
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:1945