freeipa/ipaplatform/debian
Peter Keresztes Schmidt a5cbdb57e5 Split named custom config to allow changes in options stanza
Upgrade path to add additional include to named.conf is not handled.

Remove bindkeys-file directive from named config
The ISC DVL service was shut down (https://www.isc.org/bind-keys/).
BIND versions since April 2017 (i.e. 9.9.10, 9.10.5, 9.11.1 and later)
include a hard-coded copy of the root KSK which gets updates automatically
according to RFC 5011.

Move dnssec-enable directive to custom named config

Move comment named config being managed by FreeIPA to the top

Move settings which could be changed by administrators to
ipa-options-ext.conf. Settings defined there are sole responsibility of the
administrator. We do not check if they might collide with our settings in
named.conf.

Fixes: https://pagure.io/freeipa/issue/8287
Co-authored-by: Peter Keresztes Schmidt <carbenium@outlook.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2020-06-08 15:53:40 +03:00
..
__init__.py ipaplatform: Add Debian platform module. 2017-01-19 16:45:42 +01:00
constants.py named.conf: Disable duplicate zone on debian, and modify data dir 2018-05-29 17:03:56 +02:00
paths.py Split named custom config to allow changes in options stanza 2020-06-08 15:53:40 +03:00
services.py Debian: Use RedHatCAService for pki-tomcatd 2019-04-24 14:08:20 +02:00
tasks.py Debian: Use parse_ipa_version from redhat. 2020-04-28 14:39:42 +02:00