[Freeipa-devel] [PATCHES 0252-0253] DNSSEC: allow to move DNSSEC key master to another IPA server

Martin Basti mbasti at redhat.com
Wed Jun 17 11:37:28 UTC 2015


On 17/06/15 13:26, Petr Spacek wrote:
> On 16.6.2015 15:40, Martin Basti wrote:
>> On 05/06/15 12:54, Petr Spacek wrote:
>>> On 20.5.2015 18:00, Martin Basti wrote:
>>>> This patch allows to disable DNSSEC key master on IPA server, or replace
>>>> current DNSSEC key master with another IPA server.
>>>>
>>>> Only for master branch.
>>>>
>>>> https://fedorahosted.org/freeipa/ticket/4657
>>>>
>>>> Patches attached.
>>> NACK. This happens on DNSSEC key master:
>>> $ ipa-dns-install --disable-dnssec-master
>>>
>>> Do you want to disable current DNSSEC key master? [no]: yes
>>> Unexpected error - see /var/log/ipaserver-install.log for details:
>>> TypeError: sequence item 0: expected string, DNSName found
>>>      
>>> 2015-06-05T10:52:35Z DEBUG   File
>>> "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line
>>> 733, in run_script
>>>       return_value = main_function()
>>>
>>>     File "/sbin/ipa-dns-install", line 128, in main
>>>       dns_installer.disable_dnssec_master(options.unattended)
>>>
>>>     File "/usr/lib/python2.7/site-packages/ipaserver/install/dns.py", line 112,
>>> in disable_dnssec_master
>>>       ", ".join(dnssec_zones))
>>>
>>> 2015-06-05T10:52:35Z DEBUG The ipa-dns-install command failed, exception:
>>> TypeError: sequence item 0: expected string, DNSName found
>>>
>> Updated patches attached.
>>
>> Due new installers, more changes were required.
> Sorry, NACK, I'm not able to apply this patch set to current master
> (69607250b9762a6c9b657dd31653b03d54a7b411).
>
Rebased patches attached.

-- 
Martin Basti

-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbasti-0252.3-DNSSEC-allow-to-disable-replace-DNSSEC-key-master.patch
Type: text/x-patch
Size: 27477 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20150617/10a1a16b/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbasti-0253.3-DNSSEC-update-message.patch
Type: text/x-patch
Size: 1050 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20150617/10a1a16b/attachment-0001.bin>


More information about the Freeipa-devel mailing list