diff options
| author | Martin Kosek <mkosek@redhat.com> | 2012-06-28 16:46:48 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2012-07-13 16:03:58 +0200 |
| commit | 9d69db80a3d1fc46236a4546988176cdd7939b82 (patch) | |
| tree | 345e5ba63fe447b151377df1bda42475e3cb8160 /install/share | |
| parent | 4879c68d68634715b9d08a08a4c7be882634409f (diff) | |
| download | freeipa.git-9d69db80a3d1fc46236a4546988176cdd7939b82.tar.gz freeipa.git-9d69db80a3d1fc46236a4546988176cdd7939b82.tar.xz freeipa.git-9d69db80a3d1fc46236a4546988176cdd7939b82.zip | |
Enable SOA serial autoincrement
SOA serial autoincrement is a requirement for major DNS features,
e.g. zone transfers or DNSSEC. Enable it by default in named.conf
both for new and upgraded installations. Name of the bind-dyndb-ldap
option is "serial_autoincrement".
From now on, idnsSOAserial attribute also has to be put to
replication agreement exclude list as serial will be incremented
on each DNS server separately and won't be shared. Exclude list
has to be updated both for new replication agreements and the
current ones.
Minimum number of connections for bind-dyndb-ldap has been rised
to 4 connections, the setting will be updated during package upgrade.
https://fedorahosted.org/freeipa/ticket/2554
Diffstat (limited to 'install/share')
| -rw-r--r-- | install/share/bind.named.conf.template | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/install/share/bind.named.conf.template b/install/share/bind.named.conf.template index f133b089..9fdd9131 100644 --- a/install/share/bind.named.conf.template +++ b/install/share/bind.named.conf.template @@ -46,4 +46,5 @@ dynamic-db "ipa" { arg "sasl_user DNS/$FQDN"; arg "zone_refresh $ZONE_REFRESH"; arg "psearch $PERSISTENT_SEARCH"; + arg "serial_autoincrement $SERIAL_AUTOINCREMENT"; }; |