|
 |
f65af0 |
From f387cbe6f9d1e21cb46c7b9752735bf6ded176b7 Mon Sep 17 00:00:00 2001
|
|
|
f65af0 |
From: Florence Blanc-Renaud <flo@redhat.com>
|
|
|
f65af0 |
Date: Fri, 31 Aug 2018 10:09:15 +0200
|
|
|
f65af0 |
Subject: [PATCH] ipa-server-install: do not perform forwarder validation with
|
|
|
f65af0 |
--no-dnssec-validation
|
|
|
f65af0 |
|
|
|
f65af0 |
ipa-server-install is checking if the forwarder(s) specified with
|
|
|
f65af0 |
--forwarder argument support DNSSEC. When the --no-dnssec-validation
|
|
|
f65af0 |
option is added, the installer should not perform the check.
|
|
|
f65af0 |
|
|
|
f65af0 |
Fixes: https://pagure.io/freeipa/issue/7666
|
|
|
f65af0 |
Reviewed-By: Tibor Dudlak <tdudlak@redhat.com>
|
|
|
f65af0 |
---
|
|
|
f65af0 |
ipaserver/install/dns.py | 4 ++--
|
|
|
f65af0 |
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
|
f65af0 |
|
|
|
f65af0 |
diff --git a/ipaserver/install/dns.py b/ipaserver/install/dns.py
|
|
|
f65af0 |
index cac7a9213796d6618854b12da6c2a7fe60afdbf9..e4f73ac025dfe8aa19ef99c8d0ab9379caa32610 100644
|
|
|
f65af0 |
--- a/ipaserver/install/dns.py
|
|
|
f65af0 |
+++ b/ipaserver/install/dns.py
|
|
|
f65af0 |
@@ -293,8 +293,8 @@ def install_check(standalone, api, replica, options, hostname):
|
|
|
f65af0 |
|
|
|
f65af0 |
# test DNSSEC forwarders
|
|
|
f65af0 |
if options.forwarders:
|
|
|
f65af0 |
- if (not bindinstance.check_forwarders(options.forwarders)
|
|
|
f65af0 |
- and not options.no_dnssec_validation):
|
|
|
f65af0 |
+ if not options.no_dnssec_validation \
|
|
|
f65af0 |
+ and not bindinstance.check_forwarders(options.forwarders):
|
|
|
f65af0 |
options.no_dnssec_validation = True
|
|
|
f65af0 |
print("WARNING: DNSSEC validation will be disabled")
|
|
|
f65af0 |
|
|
|
f65af0 |
--
|
|
|
f65af0 |
2.17.1
|
|
|
f65af0 |
|