freeipa

#7666 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
Closed: fixed Opened by abiagion.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla: Bug 1603444

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

The error is in https://pagure.io/freeipa/blob/master/f/ipaserver/install/dns.py#_293-298
    # test DNSSEC forwarders
    if options.forwarders:
        if (not bindinstance.check_forwarders(options.forwarders)
                and not options.no_dnssec_validation):
            options.no_dnssec_validation = True
            print("WARNING: DNSSEC validation will be disabled")
the check for 'not options.no_dnssec_validation' should be before the check_forwarders() call. When dnssec validation is disabled, we shouldn't even try to run it.

Metadata Update from @abiagion:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1603444

Metadata Update from @frenaud:
- Issue assigned to frenaud

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/2310

master:

  • 911416e43dd58602df99fa06fe535655d26461ca ipa-server-install: do not perform forwarder validation with --no-dnssec-validation
  • 739ddce6536502b3826f0480a9c7b69bf0f35905 tests: add test for server install with --no-dnssec-validation

ipa-4-7:

  • a66789603a30b9582d9255a02edfbf66d90ae78d ipa-server-install: do not perform forwarder validation with --no-dnssec-validation
  • ac7b3f989e86ac0ff216b9b0c07ab2f1a0d571a1 tests: add test for server install with --no-dnssec-validation

ipa-4-6:

  • d388bcf676d28c58eb2f5f34a1ddadada06d0e99 ipa-server-install: do not perform forwarder validation with --no-dnssec-validation
  • 98212c168ec1c68abe796f4133c782f6790ad174 tests: add test for server install with --no-dnssec-validation

Metadata Update from @tdudlak:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
https://github.com/freeipa/freeipa/pull/2310
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.