diff options
| author | Martin Basti <mbasti@redhat.com> | 2015-01-06 10:36:06 +0100 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2015-01-09 13:30:37 +0100 |
| commit | bb405bd9721de205cbc3f640ad2c758acf8ed8d4 (patch) | |
| tree | 5509536b4aa71ec230768d7f0b6fdd7b85e6bb1e /install | |
| parent | 4f1fdc8f70c1efdb6c6074181d3ecbcb45df001e (diff) | |
| download | freeipa-bb405bd9721de205cbc3f640ad2c758acf8ed8d4.tar.gz freeipa-bb405bd9721de205cbc3f640ad2c758acf8ed8d4.tar.xz freeipa-bb405bd9721de205cbc3f640ad2c758acf8ed8d4.zip | |
Fix: Upgrade forwardzones zones after adding newer replica
Patch fixes issue, when forwardzones has not been upgraded after adding
replica >=4.0 into topology with IPA 3.x servers.
Ticket: https://fedorahosted.org/freeipa/ticket/4818
Reviewed-By: Petr Spacek <pspacek@redhat.com>
Diffstat (limited to 'install')
| -rw-r--r-- | install/share/dns.ldif | 2 | ||||
| -rw-r--r-- | install/updates/40-dns.update | 1 |
2 files changed, 3 insertions, 0 deletions
diff --git a/install/share/dns.ldif b/install/share/dns.ldif index 2c6050f85..05f5684c3 100644 --- a/install/share/dns.ldif +++ b/install/share/dns.ldif @@ -2,8 +2,10 @@ dn: cn=dns,$SUFFIX changetype: add objectClass: idnsConfigObject objectClass: nsContainer +objectClass: ipaConfigObject objectClass: top cn: dns +ipaConfigString: DNSVersion 1 aci: (targetattr = "*")(version 3.0; acl "Allow read access"; allow (read,search,compare) groupdn = "ldap:///cn=Read DNS Entries,cn=permissions,cn=pbac,$SUFFIX" or userattr = "parent[0,1].managedby#GROUPDN";) aci: (target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Add DNS entries in a zone";allow (add) userattr = "parent[1].managedby#GROUPDN";) aci: (target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Remove DNS entries from a zone";allow (delete) userattr = "parent[1].managedby#GROUPDN";) diff --git a/install/updates/40-dns.update b/install/updates/40-dns.update index 00fc97fca..251df5907 100644 --- a/install/updates/40-dns.update +++ b/install/updates/40-dns.update @@ -2,6 +2,7 @@ # update DNS container dn: cn=dns, $SUFFIX addifexist: objectClass: idnsConfigObject +addifexist: objectClass: ipaConfigObject addifexist: aci:'(target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Add DNS entries in a zone";allow (add) userattr = "parent[1].managedby#GROUPDN";)' addifexist: aci:'(target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Remove DNS entries from a zone";allow (delete) userattr = "parent[1].managedby#GROUPDN";)' addifexist: aci:'(targetattr = "idnsname || cn || idnsallowdynupdate || dnsttl || dnsclass || arecord || aaaarecord || a6record || nsrecord || cnamerecord || ptrrecord || srvrecord || txtrecord || mxrecord || mdrecord || hinforecord || minforecord || afsdbrecord || sigrecord || keyrecord || locrecord || nxtrecord || naptrrecord || kxrecord || certrecord || dnamerecord || dsrecord || sshfprecord || rrsigrecord || nsecrecord || idnsname || idnszoneactive || idnssoamname || idnssoarname || idnssoaserial || idnssoarefresh || idnssoaretry || idnssoaexpire || idnssoaminimum || idnsupdatepolicy || idnsallowquery || idnsallowtransfer || idnsallowsyncptr || idnsforwardpolicy || idnsforwarders || dlvrecord || idnssecinlinesigning || nsec3paramrecord || tlsarecord ")(target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Update DNS entries in a zone";allow (write) userattr = "parent[0,1].managedby#GROUPDN";)' |