From 9d69db80a3d1fc46236a4546988176cdd7939b82 Mon Sep 17 00:00:00 2001 From: Martin Kosek Date: Thu, 28 Jun 2012 16:46:48 +0200 Subject: Enable SOA serial autoincrement SOA serial autoincrement is a requirement for major DNS features, e.g. zone transfers or DNSSEC. Enable it by default in named.conf both for new and upgraded installations. Name of the bind-dyndb-ldap option is "serial_autoincrement". From now on, idnsSOAserial attribute also has to be put to replication agreement exclude list as serial will be incremented on each DNS server separately and won't be shared. Exclude list has to be updated both for new replication agreements and the current ones. Minimum number of connections for bind-dyndb-ldap has been rised to 4 connections, the setting will be updated during package upgrade. https://fedorahosted.org/freeipa/ticket/2554 --- ipaserver/install/bindinstance.py | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) (limited to 'ipaserver/install/bindinstance.py') diff --git a/ipaserver/install/bindinstance.py b/ipaserver/install/bindinstance.py index 3ff59329..9faf1769 100644 --- a/ipaserver/install/bindinstance.py +++ b/ipaserver/install/bindinstance.py @@ -467,7 +467,7 @@ class BindInstance(service.Service): def setup(self, fqdn, ip_address, realm_name, domain_name, forwarders, ntp, reverse_zone, named_user="named", zonemgr=None, - zone_refresh=0, persistent_search=True): + zone_refresh=0, persistent_search=True, serial_autoincrement=True): self.named_user = named_user self.fqdn = fqdn self.ip_address = ip_address @@ -480,6 +480,7 @@ class BindInstance(service.Service): self.reverse_zone = reverse_zone self.zone_refresh = zone_refresh self.persistent_search = persistent_search + self.serial_autoincrement = True if not zonemgr: self.zonemgr = 'hostmaster.%s' % self.domain @@ -576,7 +577,10 @@ class BindInstance(service.Service): optional_ntp += "_ntp._udp\t\tIN SRV 0 100 123\t%s""" % self.host_in_rr else: optional_ntp = "" - persistent_search = "yes" if self.persistent_search else "no" + + boolean_var = {} + for var in ('persistent_search', 'serial_autoincrement'): + boolean_var[var] = "yes" if getattr(self, var, False) else "no" self.sub_dict = dict(FQDN=self.fqdn, IP=self.ip_address, @@ -589,7 +593,8 @@ class BindInstance(service.Service): OPTIONAL_NTP=optional_ntp, ZONEMGR=self.zonemgr, ZONE_REFRESH=self.zone_refresh, - PERSISTENT_SEARCH=persistent_search) + PERSISTENT_SEARCH=boolean_var['persistent_search'], + SERIAL_AUTOINCREMENT=boolean_var['serial_autoincrement'],) def __setup_dns_container(self): self._ldap_mod("dns.ldif", self.sub_dict) -- cgit