From d6d12e9dc597d6637ae49057a44b51476ff876b0 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Tue, 26 Feb 2008 13:51:56 -0500
Subject: Require that service principals resolve to a DNS A record. There is a
 --force option for those who know what they are doing.

433483
---
 ipa-python/ipaerror.py | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'ipa-python/ipaerror.py')

diff --git a/ipa-python/ipaerror.py b/ipa-python/ipaerror.py
index 570cbb93..c5ed7e77 100644
--- a/ipa-python/ipaerror.py
+++ b/ipa-python/ipaerror.py
@@ -143,6 +143,11 @@ INPUT_SAME_GROUP = gen_error_code(
         0x0002,
         "You can't add a group to itself")
 
+INPUT_NOT_DNS_A_RECORD = gen_error_code(
+        INPUT_CATEGORY,
+        0x0003,
+        "The requested hostname is not a DNS A record. This is required by Kerberos.")
+
 #
 # Connection errors
 #
-- 
cgit