freeipa

#9748 Server installation: dot-forwarder not added as a forwarder
Closed: fixed by sumenon. Opened by frenaud.

Closed: fixed
Reopen Issue

Issue

When installing a server with DNS and DNS over TTL, the DoT forwarder is not added as a forwarder.

Steps to Reproduce

  1. install a machine with freeipa-server-encrypted-dns package:
# dnf copr enable -y @freeipa/freeipa-master-nightly
# dnf install -y freeipa-server-dns freeipa-server-encrypted-dns
  1. Configure IPA server with encrypted dns
# ipa-server-install --domain ipa.test --realm IPA.TEST --setup-dns --dns-over-tls --dot-forwarder "1.1.1.1#cloudflare-dns.com" -a Secret123 -p Secret123 -U
  1. Check the forwarders with
# echo Secret123 | kinit admin
# ipa dnsconfig-show
# ipa dnsserver-show `hostname`

Actual behavior

The DoT forwarder is not configured as a DNS forwarder.

# ipa dnsconfig-show
---------------------------------
Global DNS configuration is empty
---------------------------------
  IPA DNS servers: server.ipa.test
#  ipa dnsserver-show `hostname`
  Server name: server.ipa.test
  SOA mname override: server.ipa.test.
  Forwarders: 127.0.0.55
  Forward policy: first

Expected behavior

The DoT forwarder should be added to the list of forwarders for the DNS server and appear in the output of ipa dnsserver-show

Version/Release/Distribution

# rpm -q freeipa-server
freeipa-server-4.13.0.dev202502131605+git-0.fc41.x86_64

Additional info:

Seems to be related to a typo in the code:
in ipaserver/install/dns.py lines 439-440:

    if not options.forwarders and options.dot_forwarders:
        options.forwaders = [fw.split("#")[0] for fw in options.dot_forwarders]

Note the missing r in forwaders

Metadata Update from @frenaud:
- Issue assigned to frenaud

Metadata Update from @frenaud:
- Assignee reset

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/7700
- Issue assigned to antorres

master:

  • f1c30c5f6b587cb6ad31c0c5563ead05e8d55c51 dns: don't populate forwarders with DoT forwarders

ipa-4-12:

  • e1d517032afa2a8258c1ff8bd6bfdd4175b42327 dns: don't populate forwarders with DoT forwarders

Metadata Update from @sumenon:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-88037, https://issues.redhat.com/browse/RHEL-88043
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.