diff options
| author | Martin Kosek <mkosek@redhat.com> | 2012-02-14 11:11:41 +0100 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2012-02-24 09:40:51 +0100 |
| commit | 1c898e388b4777e0dfd0dd7577bbb4971e308605 (patch) | |
| tree | fe8d2f7af28cf8c4f2887641d9fa94c724bc3884 /ipalib/plugins | |
| parent | 210d913eb19ee24e4a271fab8746e4ca5234c3d6 (diff) | |
| download | freeipa-1c898e388b4777e0dfd0dd7577bbb4971e308605.tar.gz freeipa-1c898e388b4777e0dfd0dd7577bbb4971e308605.tar.xz freeipa-1c898e388b4777e0dfd0dd7577bbb4971e308605.zip | |
Add API for PTR sync control
New version of bind-dyndb-ldap plugin have an ability to
automatically update machine reverse address when its forward
address is updated via GSS-TSIG update. The reverse zone must be
managed by FreeIPA as well in order of this feature to work.
As it would not be secure to enable this behaviour for all zones
there is a global attribute that can enable PTR sync for all zones
and also a per-zone attribute that can enable for chosen zones
only.
This patch adds an API for this control.
https://fedorahosted.org/freeipa/ticket/2176
Diffstat (limited to 'ipalib/plugins')
| -rw-r--r-- | ipalib/plugins/dns.py | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/ipalib/plugins/dns.py b/ipalib/plugins/dns.py index 79e7407af..aa2efdef9 100644 --- a/ipalib/plugins/dns.py +++ b/ipalib/plugins/dns.py @@ -1357,6 +1357,11 @@ class dnszone(LDAPObject): label=_('Forward policy'), values=(u'only', u'first',), ), + Bool('idnsallowsyncptr?', + cli_name='allow_sync_ptr', + label=_('Allow PTR sync'), + doc=_('Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the zone'), + ), ) api.register(dnszone) |