[fedora-26] named.conf template: update API for bind 9.11 #351
Conversation
|
The version of BIND in I also have a COPR repo with bind 9.11 for F25. I'm going to add bind-dyndb-ldap v11.0 there as well. I'll also try to build for Fedora 24. |
| arg "auth_method sasl"; | ||
| arg "sasl_mech GSSAPI"; | ||
| arg "sasl_user DNS/$FQDN"; | ||
| arg "serial_autoincrement yes"; |
There was a problem hiding this comment.
why serial autoincrement was removed?
There was a problem hiding this comment.
It's an obsolote option that is no longer supported.
|
How do you solve upgrades F25->F26? |
|
This fix only applies to new IPA installations. Upgrade of |
tkrizek
force-pushed
the
t6565-named-template
branch
from
c05e5d1
to
c00ae00
Compare
|
Required version of BIND is a subject to change. When a version with fixed |
tkrizek
force-pushed
the
t6565-named-template
branch
from
c00ae00
to
06760c2
Compare
tkrizek
force-pushed
the
t6565-named-template
branch
from
06760c2
to
3604fef
Compare
Option serial_autoincrement is no longer supported. Remove it from the named.conf parser and add it to deprecated options to be removed. https://fedorahosted.org/freeipa/ticket/6565
Use the new API for bind 9.11. Removed deprecated "serial_autoincrement" and updated the rest of configuration to conform to the new format. This only fixes new IPA installations. For existing installations, named.conf will be transformed when the new version of bind-dyndb-ldap is installed. https://fedorahosted.org/freeipa/ticket/6565
bynd-dyndb-ldap used a custom configuration file format. Since BIND 9.11, an API was accepted upstream. This caused backward incompatible changes to the named.conf configuration file used to configure the bind-dyndb-ldap BIND plugin. Version 11.0 of bind-dyndb-ldap plugin and BIND 9.11 are required to use with the new config file format. https://fedorahosted.org/freeipa/ticket/6565
tkrizek
force-pushed
the
t6565-named-template
branch
from
3604fef
to
328f8ab
Compare
|
I've updated the version of BIND and the patch should be complete. I suggest we do a review (you can use https://copr.fedorainfracloud.org/coprs/tkrizek/bind-9.11/ for F24/F25), but delay merging this patch so we do not have to use the COPR for our upstream development until necessary. |
|
Tested manually |
Please do not merge this patch upstream, we need to have BIND 9.11 available before we do, otherwise it will break DNS installation. This patch is intended for Fedora 26 downstream and I'm only posting it for review.
This patch only fixes DNS for new IPA installations. Another patch for fixing existing named configs is necessary. This will most likely be fixed in bind-dyndb-ldap upstream.
Use the new API for bind 9.11. Removed deprecated "serial_autoincrement"
and updated the rest of configuration to conform to the new format.
https://fedorahosted.org/freeipa/ticket/6565