mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-25 14:40:16 -05:00
The new option is needed to be able to deactivate DNSSEC validation for unbound. Unbound is by default configured to do DNSSEC validation with the validator module. The solution is to set module-config to "iterator". When the server is built with EDNS client subnet support this should be changed to "subnetcache iterator" according to the unbound man page. Fixes: https://pagure.io/freeipa/issue/9805 Signed-off-by: Thomas Woerner <twoerner@redhat.com> Reviewed-By: Antonio Torres <antorres@redhat.com> Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>