[Freeipa-devel] [PATCHES 0252-0253] DNSSEC: allow to move DNSSEC key master to another IPA server

[Petr Spacek]

On 20.5.2015 18:00, Martin Basti wrote:
> This patch allows to disable DNSSEC key master on IPA server, or replace
> current DNSSEC key master with another IPA server.
> 
> Only for master branch.
> 
> https://fedorahosted.org/freeipa/ticket/4657
> 
> Patches attached.

NACK. This happens on DNSSEC key master:
$ ipa-dns-install --disable-dnssec-master

Do you want to disable current DNSSEC key master? [no]: yes
Unexpected error - see /var/log/ipaserver-install.log for details:
TypeError: sequence item 0: expected string, DNSName found
	
2015-06-05T10:52:35Z DEBUG   File
"/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line
733, in run_script
    return_value = main_function()

  File "/sbin/ipa-dns-install", line 128, in main
    dns_installer.disable_dnssec_master(options.unattended)

  File "/usr/lib/python2.7/site-packages/ipaserver/install/dns.py", line 112,
in disable_dnssec_master
    ", ".join(dnssec_zones))

2015-06-05T10:52:35Z DEBUG The ipa-dns-install command failed, exception:
TypeError: sequence item 0: expected string, DNSName found

-- 
Petr^2 Spacek