freeipa

#6894 DNS forwarder address added during IPA installation shouldn't add IP-Address '0.0.0.0'
Closed: fixed Opened by jcholast.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1438668

Description of problem: DNS forwarder address added during installation
shouldn't add IP-Address 0.0.0.0
Version-Release number of selected component (if applicable):
ipa-server-4.5.0-4.el7.x86_64
How reproducible:
Always
Steps to Reproduce:
1. Install IPA-server with integrated DNS
2. On the below steps enter the forwarder IP-address as 0.0.0.0
Do you want to configure these servers as DNS forwarders? [yes]:
All DNS servers from /etc/resolv.conf were added. You can enter additional
addresses now:
Enter an IP address for a DNS forwarder, or press Enter to skip: 0.0.0.0
3. On the below steps enter the forwarder IP-address 255.255.255.255
All DNS servers from /etc/resolv.conf were added. You can enter additional
addresses now:
Enter an IP address for a DNS forwarder, or press Enter to skip:
255.255.255.255
Actual results:
2. Enter an IP address for a DNS forwarder, or press Enter to skip: 0.0.0.0
DNS forwarder 0.0.0.0 added. You may add another.
Enter an IP address for a DNS forwarder, or press Enter to skip:
Checking DNS forwarders, please wait ...
ipa         : ERROR    DNS server 0.0.0.0: query '. SOA': The DNS operation
timed out after 10.0005121231 seconds
ipa.ipapython.install.cli.install_tool(CompatServerMasterInstall): ERROR    DNS
server 0.0.0.0: query '. SOA': The DNS operation timed out after 10.0005121231
seconds
ipa.ipapython.install.cli.install_tool(CompatServerMasterInstall): ERROR    The
ipa-server-install command failed. See /var/log/ipaserver-install.log for more
information
3. Do you want to configure these servers as DNS forwarders? [yes]:
All DNS servers from /etc/resolv.conf were added. You can enter additional
addresses now:
Enter an IP address for a DNS forwarder, or press Enter to skip:
255.255.255.255
Error: Invalid IP Address 255.255.255.255: cannot use IANA reserved IP address
255.255.255.255 <====
DNS forwarder 255.255.255.255 not added.
Expected results:
We can see that 255.255.255.255 is not allowed as a valid DNS forwarder
address, in the similar case 0.0.0.0 shouldn't be allowed as well because
0.0.0.0 will never be used as forwarder address.
Although the step of DNS quering for 0.0.0.0 is correct since its been added,
it shouldn't be allowed to be added in the first place and should be rejected
with invalid error message.
Additional info:

Metadata Update from @jcholast:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1438668

Metadata Update from @jcholast:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1438668

Metadata Update from @jcholast:
- Issue set to the milestone: None
- Issue tagged with: tracker

Metadata Update from @jcholast:
- Issue assigned to jcholast

master:

  • 0784e53f7f8a323acafbbff26a9d1c0276a229b0 spec file: bump python-netaddr Requires

Metadata Update from @pvoborni:
- Issue priority set to: critical
- Issue set to the milestone: FreeIPA 4.7

Sorry 4.7 is wrong milestone. It has been fixed, so the only missing thing is backport the version bump to 4.5.1

Metadata Update from @pvoborni:
- Issue set to the milestone: FreeIPA 4.5.1 (was: FreeIPA 4.7)

ipa-4-5:

  • ecccd6cb843c44093449cc45a7d94bb14fa65513 spec file: bump python-netaddr Requires

Metadata Update from @mbasti:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • 9c208ea14db34dbadf5cdb1cdabf887105b7ae19 IANA reserved IP address can not be used as a forwarder. This test checks if ipa server installation throws an error when 0.0.0.0 is specified as forwarder IP address.

ipa-4-6:

  • fe5d037c2221dd7224a8a3f2b47f78fdfbb92b48 IANA reserved IP address can not be used as a forwarder. This test checks if ipa server installation throws an error when 0.0.0.0 is specified as forwarder IP address.

ipa-4-5:

  • e1e6f132c6aa102f495130303c6e91b6b2db56da IANA reserved IP address can not be used as a forwarder. This test checks if ipa server installation throws an error when 0.0.0.0 is specified as forwarder IP address.
Metadata

tracker

None
None
Low
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.