[Freeipa-devel] [PATCHES 0252-0253] DNSSEC: allow to move DNSSEC key master to another IPA server

Petr Spacek pspacek at redhat.com
Wed Jun 17 11:26:37 UTC 2015


On 16.6.2015 15:40, Martin Basti wrote:
> On 05/06/15 12:54, Petr Spacek wrote:
>> On 20.5.2015 18:00, Martin Basti wrote:
>>> This patch allows to disable DNSSEC key master on IPA server, or replace
>>> current DNSSEC key master with another IPA server.
>>>
>>> Only for master branch.
>>>
>>> https://fedorahosted.org/freeipa/ticket/4657
>>>
>>> Patches attached.
>> NACK. This happens on DNSSEC key master:
>> $ ipa-dns-install --disable-dnssec-master
>>
>> Do you want to disable current DNSSEC key master? [no]: yes
>> Unexpected error - see /var/log/ipaserver-install.log for details:
>> TypeError: sequence item 0: expected string, DNSName found
>>     
>> 2015-06-05T10:52:35Z DEBUG   File
>> "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line
>> 733, in run_script
>>      return_value = main_function()
>>
>>    File "/sbin/ipa-dns-install", line 128, in main
>>      dns_installer.disable_dnssec_master(options.unattended)
>>
>>    File "/usr/lib/python2.7/site-packages/ipaserver/install/dns.py", line 112,
>> in disable_dnssec_master
>>      ", ".join(dnssec_zones))
>>
>> 2015-06-05T10:52:35Z DEBUG The ipa-dns-install command failed, exception:
>> TypeError: sequence item 0: expected string, DNSName found
>>
> Updated patches attached.
> 
> Due new installers, more changes were required.

Sorry, NACK, I'm not able to apply this patch set to current master
(69607250b9762a6c9b657dd31653b03d54a7b411).

-- 
Petr^2 Spacek




More information about the Freeipa-devel mailing list