In a master/replica freeipa setup with DNSSEC -- is it normal the "sending notifies" happens forever? It would appear the master sends a notify for a zone, the replica gets it, sees an updated SOA, updates itself, sends a notify to the master, which sees a higher SOA, updates itself, sends a notify to the replica .. again and again forever, and once for each zone. How can this be avoided? Thanks Harry Coin