freeipa.git/install/share/bind.named.conf.template, branch fix_ber_scanf

named.conf: Disable duplicate zone on debian, and modify data dir

2018-05-29T15:03:56+00:00

zone already imported via default zones.

Reviewed-By: Stanislav Laznicka 
Reviewed-By: Christian Heimes

Use system-wide crypto-policies on Fedora

2018-02-20T16:01:52+00:00

HTTPS connections from IPA framework and bind named instance now use
system-wide crypto-policies on Fedora.

For HTTPS the 'DEFAULT' crypto policy also includes unnecessary ciphers
for PSK, SRP, aDSS and 3DES. Since these ciphers are not used by freeIPA,
they are explicitly excluded.

See: https://bugzilla.redhat.com/show_bug.cgi?id=1179925
See: https://bugzilla.redhat.com/show_bug.cgi?id=1179220
Fixes: https://pagure.io/freeipa/issue/4853
Signed-off-by: Christian Heimes 
Reviewed-By: Stanislav Laznicka

named.conf template: add modification warning

2017-05-23T10:37:48+00:00

Warn the user some modifications may break IPA setup or upgrade.
All changes the user makes should be explicitly supported and mentioned
in the documentation. Undocumented and unsupported changes, such as
renaming dyndb part from "ipa" will break IPA.

Signed-off-by: Tomas Krizek 
Reviewed-By: Stanislav Laznicka

named.conf template: update API for bind 9.11

2017-02-09T15:34:53+00:00

Use the new API for bind 9.11. Removed deprecated "serial_autoincrement"
and updated the rest of configuration to conform to the new format.

This only fixes new IPA installations. For existing installations,
named.conf will be transformed when the new version of bind-dyndb-ldap
is installed.

https://fedorahosted.org/freeipa/ticket/6565

Reviewed-By: Martin Basti

DNS Locations: dnsserver: use the newer config way in installer

2016-06-17T13:22:24+00:00

Store some parts of DNS configuration in LDAP tree instead of named.conf

https://fedorahosted.org/freeipa/ticket/2008

Reviewed-By: Petr Spacek 
Reviewed-By: Jan Cholasta

DNS Locations: dnsserver: put server_id option into named.conf

2016-06-17T13:22:24+00:00

The option server_id is required for DNS location feature, otherwise it
will not work.

https://fedorahosted.org/freeipa/ticket/2008

Reviewed-By: Petr Spacek 
Reviewed-By: Jan Cholasta

Extend installers with --forward-policy option

2016-04-28T16:46:06+00:00

This option specified forward policy for global forwarders.
The value is put inside /etc/named.conf.

https://fedorahosted.org/freeipa/ticket/5710

Reviewed-By: Martin Basti

DNSSEC: validate forwarders

2014-10-21T10:23:03+00:00

Tickets:
https://fedorahosted.org/freeipa/ticket/3801
https://fedorahosted.org/freeipa/ticket/4417

Design:
https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC

Reviewed-By: Jan Cholasta 
Reviewed-By: David Kupka

Make named.conf template platform independent

2014-10-14T11:55:02+00:00

Reviewed-By: David Kupka 
Reviewed-By: Petr Spacek

Add missing attributes to named.conf

2014-10-14T11:55:02+00:00

Ticket: https://fedorahosted.org/freeipa/ticket/3801#comment:31
Reviewed-By: David Kupka 
Reviewed-By: Petr Spacek