pgreco / rpms / ipa

Forked from forks/areguera/rpms/ipa 4 years ago
Clone

Blame SOURCES/0039-ipa-server-install-do-not-perform-forwarder-validati.patch

95ea96
From f387cbe6f9d1e21cb46c7b9752735bf6ded176b7 Mon Sep 17 00:00:00 2001
95ea96
From: Florence Blanc-Renaud <flo@redhat.com>
95ea96
Date: Fri, 31 Aug 2018 10:09:15 +0200
95ea96
Subject: [PATCH] ipa-server-install: do not perform forwarder validation with
95ea96
 --no-dnssec-validation
95ea96
95ea96
ipa-server-install is checking if the forwarder(s) specified with
95ea96
--forwarder argument support DNSSEC. When the --no-dnssec-validation
95ea96
option is added, the installer should not perform the check.
95ea96
95ea96
Fixes: https://pagure.io/freeipa/issue/7666
95ea96
Reviewed-By: Tibor Dudlak <tdudlak@redhat.com>
95ea96
---
95ea96
 ipaserver/install/dns.py | 4 ++--
95ea96
 1 file changed, 2 insertions(+), 2 deletions(-)
95ea96
95ea96
diff --git a/ipaserver/install/dns.py b/ipaserver/install/dns.py
95ea96
index cac7a9213796d6618854b12da6c2a7fe60afdbf9..e4f73ac025dfe8aa19ef99c8d0ab9379caa32610 100644
95ea96
--- a/ipaserver/install/dns.py
95ea96
+++ b/ipaserver/install/dns.py
95ea96
@@ -293,8 +293,8 @@ def install_check(standalone, api, replica, options, hostname):
95ea96
 
95ea96
     # test DNSSEC forwarders
95ea96
     if options.forwarders:
95ea96
-        if (not bindinstance.check_forwarders(options.forwarders)
95ea96
-                and not options.no_dnssec_validation):
95ea96
+        if not options.no_dnssec_validation \
95ea96
+                and not bindinstance.check_forwarders(options.forwarders):
95ea96
             options.no_dnssec_validation = True
95ea96
             print("WARNING: DNSSEC validation will be disabled")
95ea96
 
95ea96
-- 
95ea96
2.17.1
95ea96