Antonio Torres 68cc47a3e4 eDNS: disable dnsconfd before configuring Unbound ...

If dnsconfd is kept enabled after we are done configuring Unbound for the
encrypted DNS setup, it might overwrite the configuration,
resulting in a broken setup. dnsconfd should be disabled prior to
configuring Unbound during the server/client install process.

Fixes: https://pagure.io/freeipa/issue/9859
Signed-off-by: Antonio Torres <antorres@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>

2025-12-02 10:26:56 -05:00

..

plugins

Set krbCanonicalName=admin@REALM on the admin user

2025-06-17 09:48:44 +02:00

server

Add config option for RSA key size for HTTP, DS, PKINIT, RA certs

2025-11-19 16:50:37 -05:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

acmeinstance.py

Don't rely on removing the CA to uninstall the ACME depoyment

2024-10-03 13:17:53 -04:00

adtrust.py

adtrust install: define constants for rid bases

2021-11-02 10:11:28 +01:00

adtrustinstance.py

Make path of Samba lock directory configurable and use /run/samba on Debian

2025-03-10 19:15:09 +05:30

bindinstance.py

eDNS: disable dnsconfd before configuring Unbound

2025-12-02 10:26:56 -05:00

ca.py

Move some functions to installutils to be more independent

2025-11-19 16:50:37 -05:00

cainstance.py

Move some functions to installutils to be more independent

2025-11-19 16:50:37 -05:00

certs.py

Don't assume the server has a CA service when issuing certificates

2025-11-26 14:17:23 -05:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Clean up more files and directories created by the installer(s)

2024-06-26 07:40:54 +02:00

dns.py

DNS over TLS: use system trust store

2025-09-01 13:52:09 +02:00

dnskeysyncinstance.py

ipa-dnskeysyncd: use systemd-tmpfiles to handle tokens

2025-05-06 13:48:35 +02:00

dogtag.py

Verify pki ini override early

2019-04-10 13:43:23 +02:00

dogtaginstance.py

Reduce the log level before calling PKI functions

2025-11-19 16:50:37 -05:00

dsinstance.py

Move some functions to installutils to be more independent

2025-11-19 16:50:37 -05:00

httpinstance.py

Refactor installer cert issuance to use pki python lib

2025-11-19 16:50:37 -05:00

installutils.py

Move some functions to installutils to be more independent

2025-11-19 16:50:37 -05:00

ipa_acme_manage.py

Use the APIClient instead of direct REST calls for ACME

2025-11-19 16:50:37 -05:00

ipa_backup.py

Backup-restore: backup krb5.conf.d snippet files

2025-11-07 15:50:56 +01:00

ipa_cacert_manage.py

Don't require certificates to have unique ipaCertSubject

2025-03-21 13:26:39 -04:00

ipa_cert_fix.py

Add a check into ipa-cert-fix tool to avoid updating certs if CA is close to being expired.

2025-03-25 10:33:06 +01:00

ipa_crlgen_manage.py

CRL generation master: new utility to enable|disable

2019-03-14 09:39:55 +01:00

ipa_idrange_fix.py

ipa-idrange-fix: Fix typo when ID under 1000 is present.

2025-12-01 11:19:26 +01:00

ipa_kra_install.py

Unify use of option parsers

2025-01-15 12:18:46 +01:00

ipa_ldap_updater.py

Remove -s option from ipa-ldap-updater usage

2021-05-20 14:45:27 -04:00

ipa_migrate_constants.py

ipa-migrate - only remove repl state attribute options

2025-06-23 08:15:21 +02:00

ipa_migrate.py

ipa-migrate - only remove repl state attribute options

2025-06-23 08:15:21 +02:00

ipa_otptoken_import.py

pyca: adapt import paths for TripleDES cipher

2024-12-04 09:50:44 +01:00

ipa_pkinit_manage.py

Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server

2021-06-17 17:28:48 -04:00

ipa_replica_install.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

ipa_restore.py

ipa tools: remove sensitive material from the commandline

2025-01-15 12:18:46 +01:00

ipa_server_certinstall.py

Don't require certificates to have unique ipaCertSubject

2025-03-21 13:26:39 -04:00

ipa_server_install.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

ipa_server_upgrade.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipa_subids.py

config-mod: allow disabling subordinate ID integration

2025-03-13 21:22:37 +05:30

ipa_trust_enable_agent.py

ipa-adtrust-install: run remote configuration for new agents

2020-03-05 14:40:58 +01:00

ipa_winsync_migrate.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipactl.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

kra.py

Re-organize HSM validation to be more consistent/less duplication

2024-07-12 13:53:25 -04:00

krainstance.py

Remove migration from mod_nss to mod_ssl

2025-02-26 16:29:05 +01:00

krbinstance.py

Configure renewals to use the IPA JSON API

2025-11-19 16:50:37 -05:00

ldapupdate.py

Add config option for RSA key size for HTTP, DS, PKINIT, RA certs

2025-11-19 16:50:37 -05:00

odsexporterinstance.py

odsexporterinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

opendnssecinstance.py

Clean up more files and directories created by the installer(s)

2024-06-26 07:40:54 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

pylint: do not use return at the end of flow

2025-05-06 13:48:35 +02:00

schemaupdate.py

Unify access to FQDN

2020-10-26 17:11:19 +11:00

service.py

Don't require certificates to have unique ipaCertSubject

2025-03-21 13:26:39 -04:00

sysupgrade.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

upgradeinstance.py

GetEntryFromLDIF: handle DNs case-insensitive

2025-09-18 13:29:32 +05:30