Christian Heimes 731c5b2110 Lookup ipa-ca record with NSS ...

DNS data management now uses NSS's getaddrinfo() instead of direct DNS
queries to resolve the ipa-ca record. This fixes missing ipa-ca records
when the current hostname is not resolvable in DNS but has correct
records in /etc/hosts.

Reduce timeout to 15 seconds and tighten timeout loop.

The changeset can speed up installation by almost 60 seconds.
ipa-server-install without built-in DNS calls into DNS data management
twice with a timeout of 30 seconds for each call.

Fixes: https://pagure.io/freeipa/issue/8529
Related: https://pagure.io/freeipa/issue/8521
Related: https://pagure.io/freeipa/issue/8501
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2020-10-10 12:54:06 +02:00

..

plugins

Simplify LDAPUpdater

2020-09-22 09:21:00 -04:00

server

Simplify update code

2020-10-08 08:32:08 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrust.py

Use api.env.container_sysaccounts

2020-04-28 11:28:29 +02:00

adtrustinstance.py

uninstall: Don't fail on missing /var/lib/samba

2020-08-17 10:46:23 +02:00

bindinstance.py

Don't add 127.0.0.1 to resolv.conf twice

2020-10-08 08:32:08 +02:00

ca.py

move MSCSTemplate classes to ipalib

2019-07-17 17:58:58 +03:00

cainstance.py

Spawn PKI: Execute more steps early

2020-10-05 15:04:43 +02:00

certs.py

Set mode of /etc/ipa/ca.crt to 0644 in CA-less installations

2020-08-06 12:49:51 +02:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

dns.py

Use new API for auto-forwarders

2020-09-23 16:44:26 +02:00

dnskeysyncinstance.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

dogtag.py

Verify pki ini override early

2019-04-10 13:43:23 +02:00

dogtaginstance.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

dsinstance.py

Skip offline dse.ldif patching by default

2020-10-05 15:02:14 +02:00

httpinstance.py

Clean up entire /run/ipa/ccaches directory not just files

2020-09-23 14:48:29 +02:00

installutils.py

Lookup ipa-ca record with NSS

2020-10-10 12:54:06 +02:00

ipa_acme_manage.py

Use is_ipa_configured from ipalib.facts

2020-08-18 11:11:26 +02:00

ipa_backup.py

Use separate install logs for AD and DNS instance

2020-10-06 15:35:35 +02:00

ipa_cacert_manage.py

lint: Make Pylint-2.4 happy again

2020-02-12 18:08:32 +02:00

ipa_cert_fix.py

Create a common place to retrieve facts about an IPA installation

2020-08-06 14:11:27 +02:00

ipa_crlgen_manage.py

CRL generation master: new utility to enable|disable

2019-03-14 09:39:55 +01:00

ipa_kra_install.py

Fix E722 do not use bare 'except'

2020-05-05 10:42:46 +02:00

ipa_ldap_updater.py

Simplify LDAPUpdater

2020-09-22 09:21:00 -04:00

ipa_otptoken_import.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

ipa_pkinit_manage.py

PKINIT: fix ipa-pkinit-manage enable|disable

2018-12-05 11:06:21 +01:00

ipa_replica_install.py

Enable replica install info logging to match ipa-server-install

2018-11-01 13:08:58 +01:00

ipa_restore.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

ipa_server_certinstall.py

Set the certmonger subject with a string, not an object

2020-09-10 09:21:25 +02:00

ipa_server_install.py

Improve console logging for ipa-server-install

2018-06-20 08:38:03 +02:00

ipa_server_upgrade.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipa_trust_enable_agent.py

ipa-adtrust-install: run remote configuration for new agents

2020-03-05 14:40:58 +01:00

ipa_winsync_migrate.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipactl.py

Create a common place to retrieve facts about an IPA installation

2020-08-06 14:11:27 +02:00

kra.py

named: Allow using of a custom OpenSSL engine for BIND

2020-08-31 09:42:31 +03:00

krainstance.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

krbinstance.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

ldapupdate.py

Remove magic sleep from create_index_task

2020-10-05 15:02:14 +02:00

odsexporterinstance.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

opendnssecinstance.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

Increase replication changelog trimming to 30 days

2020-08-19 14:02:27 -04:00

schemaupdate.py

Remove unused support for dm_password arg from ldapupdate.connect

2020-06-07 10:21:01 +03:00

service.py

Use new classes for run_command and Service

2020-09-22 09:23:18 -04:00

sysupgrade.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

upgradeinstance.py

Simplify LDAPUpdater

2020-09-22 09:21:00 -04:00