freeipa/ipaserver/dnssec/opendnssec.py

#
# Copyright (C) 2020  FreeIPA Contributors see COPYING for license
#

import os
from ipaplatform.paths import paths

# pylint: disable=unused-import
if paths.ODS_KSMUTIL is not None and os.path.exists(paths.ODS_KSMUTIL):
    from ._ods14 import ODSDBConnection, ODSSignerConn, ODSTask
else:
    from ._ods21 import ODSDBConnection, ODSSignerConn, ODSTask

tasks = ODSTask()
Support OpenDNSSEC 2.1: new ods-signer protocol The communication between ods-signer and the socket-activated process has changed with OpenDNSSEC 2.1. Adapt ipa-ods-exporter to support also the new protocol. The internal database was also modified. Add a wrapper calling the right code (table names hab=ve changed, as well as table columns). With OpenDNSSEC the policy also needs to be explicitely loaded after ods-enforcer-db-setup has been run, with ods-enforcer policy import The command ods-ksmutil notify must be replace with ods-enforce flush. Related: https://pagure.io/freeipa/issue/8214 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com> 2020-03-05 08:54:40 -06:00			`#`
			`# Copyright (C) 2020 FreeIPA Contributors see COPYING for license`
			`#`

			`import os`
			`from ipaplatform.paths import paths`

			`# pylint: disable=unused-import`
			`if paths.ODS_KSMUTIL is not None and os.path.exists(paths.ODS_KSMUTIL):`
opendnssec2.1 support: move all ods tasks to specific file Move all the routines run_ods* from tasks to _ods14 or _ods21 module Related: https://pagure.io/freeipa/issue/8214 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com> 2020-03-12 10:23:03 -05:00			`from ._ods14 import ODSDBConnection, ODSSignerConn, ODSTask`
Support OpenDNSSEC 2.1: new ods-signer protocol The communication between ods-signer and the socket-activated process has changed with OpenDNSSEC 2.1. Adapt ipa-ods-exporter to support also the new protocol. The internal database was also modified. Add a wrapper calling the right code (table names hab=ve changed, as well as table columns). With OpenDNSSEC the policy also needs to be explicitely loaded after ods-enforcer-db-setup has been run, with ods-enforcer policy import The command ods-ksmutil notify must be replace with ods-enforce flush. Related: https://pagure.io/freeipa/issue/8214 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com> 2020-03-05 08:54:40 -06:00			`else:`
opendnssec2.1 support: move all ods tasks to specific file Move all the routines run_ods* from tasks to _ods14 or _ods21 module Related: https://pagure.io/freeipa/issue/8214 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com> 2020-03-12 10:23:03 -05:00			`from ._ods21 import ODSDBConnection, ODSSignerConn, ODSTask`

			`tasks = ODSTask()`