Hey all,

I was looking in my logs and found I was getting the following messages:

Jun 11 11:55:34 ipa1 named-pkcs11[4370]: client 192.168.105.11#59009: request has invalid signature: TSIG DHCP_UPDATER: tsig verify failure (BADKEY)
Jun 11 11:55:34 ipa1 named-pkcs11[4370]: client 192.168.105.11#40670: request has invalid signature: TSIG DHCP_UPDATER: tsig verify failure (BADKEY)
Jun 11 11:55:34 ipa1 named-pkcs11[4370]: client 192.168.105.10#45311: request has invalid signature: TSIG DHCP_UPDATER: tsig verify failure (BADKEY)
Jun 11 11:55:34 ipa1 named-pkcs11[4370]: client 192.168.105.10#57034: request has invalid signature: TSIG DHCP_UPDATER: tsig verify failure (BADKEY)
Jun 11 11:55:34 ipa1 named-pkcs11[4370]: client 192.168.105.10#34192: request has invalid signature: TSIG DHCP_UPDATER: tsig verify failure (BADKEY)

It looks like perhaps my DNS keys are bas based on what I have read. However I have no idea how to go about fixing this. Most of what I can find online is for a standard BIND9 server rather than FreeIPA so I am unsure about the directions they give and thought I would put somethin out here for more FreeIPA-specific help.

Thanks in advance!

Kristian Petersen

System Administrator

BYU Dept. of Chemistry and Biochemistry