[Freeipa-devel] [PATCH 0029-0046, 0047] Internationalized domain names in DNS plugin

[Martin Kosek]

On 05/28/2014 01:50 PM, Martin Basti wrote:
> On Mon, 2014-05-26 at 10:33 +0200, Martin Kosek wrote:
>> freeipa-server-foreman-smartproxy#################################
>> [ 40%]
> 
> It works for me.
> I install 3.5, upgrade to 4.0 and it works
> 

Ok, thanks for testing - I might have improperly updated the patches.

Just grepping through code, I am thinking the following part of bindinstance.py
may still cause a crash:

        cnames = get_rr(domain_name, IPA_CA_RECORD, "CNAME")
        if not cnames:
            return

        root_logger.info('Converting IPA CA CNAME records to A/AAAA records')

        # create CNAME to FQDN mapping
        cname_fqdn = {}
        for cname in cnames:
            if cname.endswith('.'):
                fqdn = cname[:-1]
            else:


You can easily test that with patched 4.0 by removing ipa-ca DNS A records,
replacing with CNAMEs pointing to IPA FQDN and running ipa-upgradeconfig.

My best bet is that it will crash badly.

Martin