summaryrefslogtreecommitdiffstats
path: root/install/tools/ipa-dns-install
diff options
context:
space:
mode:
authorPetr Spacek <pspacek@redhat.com>2016-03-07 14:37:31 +0100
committerPetr Vobornik <pvoborni@redhat.com>2016-04-28 18:46:06 +0200
commit51907d5bb8fce9e5358fed50c0ec7074ef7f0c69 (patch)
tree2579a2299ac93029092174bf2a95f501ac574bbf /install/tools/ipa-dns-install
parentc7ee765c4de086ac92922519d7065fc6b6796f10 (diff)
downloadfreeipa-51907d5bb8fce9e5358fed50c0ec7074ef7f0c69.tar.gz
freeipa-51907d5bb8fce9e5358fed50c0ec7074ef7f0c69.tar.xz
freeipa-51907d5bb8fce9e5358fed50c0ec7074ef7f0c69.zip
Auto-detect default value for --forward-policy option in installers
Forward policy defaults to 'first' if no IP address belonging to a private or reserved ranges is detected on local interfaces (RFC 6303). Defaults to only if a private IP address is detected. This prevents problems with BIND automatic empty zones because conflicting zones cannot be disabled unless forwarding policy == only. https://fedorahosted.org/freeipa/ticket/5710 Reviewed-By: Martin Basti <mbasti@redhat.com>
Diffstat (limited to 'install/tools/ipa-dns-install')
-rwxr-xr-xinstall/tools/ipa-dns-install2
1 files changed, 1 insertions, 1 deletions
diff --git a/install/tools/ipa-dns-install b/install/tools/ipa-dns-install
index 53afd714d..d8b2eb0fe 100755
--- a/install/tools/ipa-dns-install
+++ b/install/tools/ipa-dns-install
@@ -58,7 +58,7 @@ def parse_options():
action="store_true", default=False,
help="Use DNS forwarders configured in /etc/resolv.conf")
parser.add_option("--forward-policy", dest="forward_policy",
- choices=("first", "only"), default="first",
+ choices=("first", "only"), default=None,
help="DNS forwarding policy for global forwarders")
parser.add_option("--reverse-zone", dest="reverse_zones",
default=[], action="append", metavar="REVERSE_ZONE",