[Freeipa-devel] [PATCHES 0252-0253] DNSSEC: allow to move DNSSEC key master to another IPA server

[Martin Basti]

On 05/06/15 12:54, Petr Spacek wrote:
> On 20.5.2015 18:00, Martin Basti wrote:
>> This patch allows to disable DNSSEC key master on IPA server, or replace
>> current DNSSEC key master with another IPA server.
>>
>> Only for master branch.
>>
>> https://fedorahosted.org/freeipa/ticket/4657
>>
>> Patches attached.
> NACK. This happens on DNSSEC key master:
> $ ipa-dns-install --disable-dnssec-master
>
> Do you want to disable current DNSSEC key master? [no]: yes
> Unexpected error - see /var/log/ipaserver-install.log for details:
> TypeError: sequence item 0: expected string, DNSName found
> 	
> 2015-06-05T10:52:35Z DEBUG   File
> "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line
> 733, in run_script
>      return_value = main_function()
>
>    File "/sbin/ipa-dns-install", line 128, in main
>      dns_installer.disable_dnssec_master(options.unattended)
>
>    File "/usr/lib/python2.7/site-packages/ipaserver/install/dns.py", line 112,
> in disable_dnssec_master
>      ", ".join(dnssec_zones))
>
> 2015-06-05T10:52:35Z DEBUG The ipa-dns-install command failed, exception:
> TypeError: sequence item 0: expected string, DNSName found
>
Updated patches attached.

Due new installers, more changes were required.

-- 
Martin Basti

-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbasti-0252.2-DNSSEC-allow-to-disable-replace-DNSSEC-key-master.patch
Type: text/x-patch
Size: 27477 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20150616/5c5413b9/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbasti-0253.2-DNSSEC-update-message.patch
Type: text/x-patch
Size: 1032 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20150616/5c5413b9/attachment-0001.bin>