search

ocf / puppet

Puppet config for OCF servers and lab machines
https://www.ocf.berkeley.edu/
32 stars 71 forks source link

remove DNSSEC #863

Open cg505 opened 4 years ago

cg505 commented 4 years ago

It has been causing lots of issues for us. See https://ocf.io/rt/6696

jvperrin commented 4 years ago

I'm still torn on this, since it was a pain to setup. I'm thinking it might make sense to try upgrading bind, see if that fixes any issues, and if not then remove DNSSEC entirely (we'd need to contact the university hostmaster to do this before removing it ourselves so the chain of trust isn't broken).