IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

DNSSEC: Add experimental support for DNSSEC

Browse Source 
Ticket: https://fedorahosted.org/freeipa/ticket/4408
Reviewed-By: Petr Spacek <pspacek@redhat.com>
This commit is contained in:
Martin Basti 2014-06-27 17:07:00 +02:00 committed by Petr Viktorin
parent 5c2ddaf660
commit 3b310d6b4f
2 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
install/share/bind.named.conf.template
View File

@ -16,6 +16,8 @@ options {
tkey-gssapi-keytab "/etc/named.keytab"; tkey-gssapi-keytab "/etc/named.keytab";
pid-file "/run/named/named.pid"; pid-file "/run/named/named.pid";
dnssec-enable yes;
}; };
/* If you want to enable debugging, eg. using the 'rndc trace' command, /* If you want to enable debugging, eg. using the 'rndc trace' command,

21
install/tools/ipa-upgradeconfig
View File

@ -594,6 +594,26 @@ def named_update_pid_file():
sysupgrade.set_upgrade_state('named.conf', 'pid-file_updated', True) sysupgrade.set_upgrade_state('named.conf', 'pid-file_updated', True)
return True return True
def named_enable_dnssec():
"""
Enable dnssec in named.conf
"""
if not sysupgrade.get_upgrade_state('named.conf', 'dnssec_enabled'):
root_logger.info('[Enabling "dnssec-enable" configuration in DNS]')
try:
bindinstance.named_conf_set_directive('dnssec-enable', 'yes',
bindinstance.NAMED_SECTION_OPTIONS,
str_val=False)
except IOError, e:
root_logger.error('Cannot update dnssec-enable configuration in %s: %s',
bindinstance.NAMED_CONF, e)
return False
else:
root_logger.debug('dnssec-enabled in %s' % bindinstance.NAMED_CONF)
sysupgrade.set_upgrade_state('named.conf', 'dnssec_enabled', True)
return True
def certificate_renewal_update(ca): def certificate_renewal_update(ca):
""" """
@ -1129,6 +1149,7 @@ def main():
named_enable_serial_autoincrement(), named_enable_serial_autoincrement(),
named_update_gssapi_configuration(), named_update_gssapi_configuration(),
named_update_pid_file(), named_update_pid_file(),
named_enable_dnssec(),
) )
if any(named_conf_changes): if any(named_conf_changes):