[Freeipa-devel] [PATCHES] 0022-0023 [RFE] DNS - IDN support

Martin Basti mbasti at redhat.com
Fri Dec 6 13:48:31 UTC 2013


Hello,

patches here contain a *draft* of IDN support for IPA DNS.

Overview:
1) IND domains stored in LDAP are punycoded(A-labels)
2) now domain can contains almost everything 
3) domains have to be normalized (AD requires normalized domains too).
Example:  groß => gross
4) --raw option shows domains punycoded
5) without --raw option domains are showed in Unicode(U-labels, human
readable form)
6) It works only in DNS module, rest of IPA is still without IDN
7) IDN domains are not added into realmdomains

TODO:
1) bug in dnspython can cause improper conversion with escaped
characters:  https://github.com/rthalley/dnspython/issues/46
2) discuss if validators should be more strict (only letters
allowed, ...)
3) fix parts of code where domains are showed in punycode - error
messages, exceptions
4) cleanup unused code

TESTS:
1) 3 failures: caused by TODO 3)
2) expected value: 'value' should be in Unicode(U-labels), instead of
punycode (part of TODO 3) )


-- 
Martin^2 Basti
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbasti-0022-Added-support-for-IDN-domains.patch
Type: text/x-patch
Size: 39677 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20131206/6835c9b7/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbasti-0023-IDN-domains-updated-test.patch
Type: text/x-patch
Size: 32249 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20131206/6835c9b7/attachment-0001.bin>


More information about the Freeipa-devel mailing list