IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Set BIND to use ldapi and use fake mname

Browse Source 
The fake_mname for now doesn't exists but is a feature that will be
added in the near future. Since any unknown arguments to bind-dyndb-ldap
are ignored, we are safe to use it now.
This commit is contained in:
Martin Nagy
2009-11-25 01:00:26 +01:00
committed by Rob Crittenden
parent d53df67c95
commit d6ca88f331
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
install/share/bind.named.conf.template
View File

@@ -32,8 +32,9 @@ include "/etc/named.rfc1912.zones";
dynamic-db "ipa" { dynamic-db "ipa" {
library "ldap.so"; library "ldap.so";
arg "uri ldap://$FQDN"; arg "uri ldapi://%2fvar%2frun%2fslapd-$SERVER_ID.socket";
arg "base cn=dns, $SUFFIX"; arg "base cn=dns, $SUFFIX";
arg "fake_mname $FQDN";
arg "auth_method sasl"; arg "auth_method sasl";
arg "sasl_mech GSSAPI"; arg "sasl_mech GSSAPI";
arg "sasl_user DNS/$FQDN"; arg "sasl_user DNS/$FQDN";

2
ipaserver/install/bindinstance.py
View File

@@ -26,6 +26,7 @@ import installutils
import ldap import ldap
import service import service
from ipaserver import ipaldap from ipaserver import ipaldap
from ipaserver.install.dsinstance import realm_to_serverid
from ipapython import sysrestore from ipapython import sysrestore
from ipapython import ipautil from ipapython import ipautil
@@ -222,6 +223,7 @@ class BindInstance(service.Service):
DOMAIN=self.domain, DOMAIN=self.domain,
HOST=self.host, HOST=self.host,
REALM=self.realm, REALM=self.realm,
SERVER_ID=realm_to_serverid(self.realm),
FORWARDERS=fwds, FORWARDERS=fwds,
SUFFIX=self.suffix, SUFFIX=self.suffix,
OPTIONAL_NTP=optional_ntp) OPTIONAL_NTP=optional_ntp)