freeipa

#8287 named not starting after #8079, ipa-ext.conf breaks bind
Closed: fixed by cheimes. Opened by carbenium.

Closed: fixed
Reopen Issue

Issue

With the patch described in #8079 applied and a /etc/named/ipa-ext.conf file containing an options section e.g.

options {
  allow-recursion { any; };
};

named fails to start with following error message:
/etc/named/ipa-ext.conf:17: 'options' redefined near 'options'

Version/Release/Distribution

4.8.6 Fedora 31

I'm able to confirm the issue. named.conf cannot have multiple options blocks. The patch 6c2710446718828e6840ac34ea6fc704ae6790db is broken by design. I guess the documented override in ipa-ext.conf was not tested.

Proposed fix: Define two override files, one for options and one for general config stanzas like ACLs.

Metadata Update from @cheimes:
- Issue priority set to: important
- Issue set to the milestone: FreeIPA 4.8.7

Just an idea (maybe a bad one):

Since we have now the possibility to include custom configuration from a file which is not managed by FreeIPA, we could treat the whole named.conf file as a template and recreate it during upgrades. This would make the upgrade code in ipaserver/install/bindinstance.py and ipaserver/install/server/upgarde.py a whole lot simpler.

Created a PR with my idea at https://github.com/freeipa/freeipa/pull/4589

Another report, https://pagure.io/freeipa/issue/8327

master:

  • a5cbdb57e50cfc62f61affda19ce878b2abd33de Split named custom config to allow changes in options stanza
  • 6e5d40e2d2a53e44270fb18a7be3b0d7e346f46d Include named config files in backup

ipa-4-8:

  • 539d46918f5c0e0c912965addd286ee31bcb93e1 Split named custom config to allow changes in options stanza
  • 782ee1162fbf82c6ab54cb7918d26aba8acbc665 Include named config files in backup

Metadata Update from @abbra:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Updates are missing

Metadata Update from @cheimes:
- Issue status updated to: Open (was: Closed)

Fixed in https://pagure.io/freeipa/issue/8363

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue set to the milestone: None (was: FreeIPA 4.8.7)
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Low
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.