diff options
author | Martin Basti <mbasti@redhat.com> | 2014-10-16 16:27:00 +0200 |
---|---|---|
committer | Martin Kosek <mkosek@redhat.com> | 2014-10-21 12:23:03 +0200 |
commit | ca030a089f9e45a5dae5f6fb5993f4cc714f1ab2 (patch) | |
tree | f99b61a736b118ce42773cc1d9ab8769b28a6a79 /install/share | |
parent | 30bc3a55cf816cc5114ddbd102afa8b52f598dec (diff) | |
download | freeipa-ca030a089f9e45a5dae5f6fb5993f4cc714f1ab2.tar.gz freeipa-ca030a089f9e45a5dae5f6fb5993f4cc714f1ab2.tar.xz freeipa-ca030a089f9e45a5dae5f6fb5993f4cc714f1ab2.zip |
DNSSEC: validate forwarders
Tickets:
https://fedorahosted.org/freeipa/ticket/3801
https://fedorahosted.org/freeipa/ticket/4417
Design:
https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Reviewed-By: David Kupka <dkupka@redhat.com>
Diffstat (limited to 'install/share')
-rw-r--r-- | install/share/bind.named.conf.template | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/install/share/bind.named.conf.template b/install/share/bind.named.conf.template index 2017cb796..3c19383c0 100644 --- a/install/share/bind.named.conf.template +++ b/install/share/bind.named.conf.template @@ -18,6 +18,7 @@ options { pid-file "$NAMED_PID"; dnssec-enable yes; + dnssec-validation yes; /* Path to ISC DLV key */ bindkeys-file "$BINDKEYS_FILE"; |