diff options
author | Stanislav Laznicka <slaznick@redhat.com> | 2015-11-25 16:38:00 +0100 |
---|---|---|
committer | Martin Basti <mbasti@redhat.com> | 2015-12-02 17:26:56 +0100 |
commit | 498471e4aed1367b72cd74d15811d0584a6ee268 (patch) | |
tree | 93930a1d714eb7e92f6b28f1a7b9436bbf046767 /ipalib | |
parent | bbbe411f357b7fbad533b5211a90bb0558b1abbe (diff) | |
download | freeipa-498471e4aed1367b72cd74d15811d0584a6ee268.tar.gz freeipa-498471e4aed1367b72cd74d15811d0584a6ee268.tar.xz freeipa-498471e4aed1367b72cd74d15811d0584a6ee268.zip |
Removed duplicate domain name validating function
Reviewed-By: Martin Basti <mbasti@redhat.com>
Diffstat (limited to 'ipalib')
-rw-r--r-- | ipalib/plugins/dns.py | 22 | ||||
-rw-r--r-- | ipalib/plugins/host.py | 2 | ||||
-rw-r--r-- | ipalib/plugins/service.py | 2 | ||||
-rw-r--r-- | ipalib/util.py | 35 |
4 files changed, 33 insertions, 28 deletions
diff --git a/ipalib/plugins/dns.py b/ipalib/plugins/dns.py index 830a70fa5..67947360e 100644 --- a/ipalib/plugins/dns.py +++ b/ipalib/plugins/dns.py @@ -51,9 +51,10 @@ from ipalib.util import (normalize_zonemgr, DNSSECSignatureMissingError, UnresolvableRecordError, EDNS0UnsupportedError, DNSSECValidationError, validate_dnssec_zone_forwarder_step1, - validate_dnssec_zone_forwarder_step2) + validate_dnssec_zone_forwarder_step2, + verify_host_resolvable) -from ipapython.ipautil import CheckedIPAddress, is_host_resolvable +from ipapython.ipautil import CheckedIPAddress from ipapython.dnsutil import DNSName if six.PY3: @@ -1554,7 +1555,7 @@ _dns_record_options = tuple(__dns_record_options_iter()) _dns_supported_record_types = tuple(record.rrtype for record in _dns_records \ if record.supported) -def check_ns_rec_resolvable(zone, name): +def check_ns_rec_resolvable(zone, name, log): assert isinstance(zone, DNSName) assert isinstance(name, DNSName) @@ -1563,7 +1564,9 @@ def check_ns_rec_resolvable(zone, name): elif not name.is_absolute(): # this is a DNS name relative to the zone name = name.derelativize(zone.make_absolute()) - if not is_host_resolvable(name): + try: + verify_host_resolvable(name, log) + except errors.DNSNotARecordError: raise errors.NotFound( reason=_('Nameserver \'%(host)s\' does not have a corresponding ' 'A/AAAA record') % {'host': name} @@ -2734,7 +2737,8 @@ class dnszone_add(DNSZoneBase_add): # verify if user specified server is resolvable if not options['force']: - check_ns_rec_resolvable(keys[0], entry_attrs['idnssoamname']) + check_ns_rec_resolvable(keys[0], entry_attrs['idnssoamname'], + self.log) # show warning about --name-server option context.show_warning_nameserver_option = True else: @@ -2833,7 +2837,7 @@ class dnszone_mod(DNSZoneBase_mod): nameserver = entry_attrs['idnssoamname'] if nameserver: if not nameserver.is_empty() and not options['force']: - check_ns_rec_resolvable(keys[0], nameserver) + check_ns_rec_resolvable(keys[0], nameserver, self.log) context.show_warning_nameserver_option = True else: # empty value, this option is required by ldap @@ -3004,7 +3008,7 @@ class dnsrecord(LDAPObject): if options.get('force', False) or nsrecords is None: return for nsrecord in nsrecords: - check_ns_rec_resolvable(keys[0], DNSName(nsrecord)) + check_ns_rec_resolvable(keys[0], DNSName(nsrecord), self.log) def _idnsname_pre_callback(self, ldap, dn, entry_attrs, *keys, **options): assert isinstance(dn, DN) @@ -4196,7 +4200,9 @@ class dns_resolve(Command): def execute(self, *args, **options): query=args[0] - if not is_host_resolvable(query): + try: + verify_host_resolvable(query, self.log) + except errors.DNSNotARecordError: raise errors.NotFound( reason=_('Host \'%(host)s\' not found') % {'host': query} ) diff --git a/ipalib/plugins/host.py b/ipalib/plugins/host.py index bceab314b..fa867f370 100644 --- a/ipalib/plugins/host.py +++ b/ipalib/plugins/host.py @@ -625,7 +625,7 @@ class host_add(LDAPCreate): check_forward=True, check_reverse=check_reverse) if not options.get('force', False) and not 'ip_address' in options: - util.validate_host_dns(self.log, keys[-1]) + util.verify_host_resolvable(keys[-1], self.log) if 'locality' in entry_attrs: entry_attrs['l'] = entry_attrs['locality'] entry_attrs['cn'] = keys[-1] diff --git a/ipalib/plugins/service.py b/ipalib/plugins/service.py index d63e00bea..4752e198b 100644 --- a/ipalib/plugins/service.py +++ b/ipalib/plugins/service.py @@ -554,7 +554,7 @@ class service_add(LDAPCreate): # We know the host exists if we've gotten this far but we # really want to discourage creating services for hosts that # don't exist in DNS. - util.validate_host_dns(self.log, hostname) + util.verify_host_resolvable(hostname, self.log) if not 'managedby' in entry_attrs: entry_attrs['managedby'] = hostresult['dn'] diff --git a/ipalib/util.py b/ipalib/util.py index 89d67e67a..c9a0237fb 100644 --- a/ipalib/util.py +++ b/ipalib/util.py @@ -66,32 +66,31 @@ def json_serialize(obj): return '' return json_serialize(obj.__json__()) -def validate_host_dns(log, fqdn): +def verify_host_resolvable(fqdn, log): """ See if the hostname has a DNS A/AAAA record. """ - try: - answers = resolver.query(fqdn, rdatatype.A) - log.debug( - 'IPA: found %d A records for %s: %s' % (len(answers), fqdn, - ' '.join(str(answer) for answer in answers)) - ) - except DNSException as e: - log.debug( - 'IPA: DNS A record lookup failed for %s' % fqdn - ) - # A record not found, try to find AAAA record + if not isinstance(fqdn, DNSName): + fqdn = DNSName(fqdn) + + fqdn = fqdn.make_absolute() + for rdtype in ('A', 'AAAA'): try: - answers = resolver.query(fqdn, rdatatype.AAAA) + answers = resolver.query(fqdn, rdtype) log.debug( - 'IPA: found %d AAAA records for %s: %s' % (len(answers), fqdn, - ' '.join(str(answer) for answer in answers)) + 'IPA: found %d %s records for %s: %s' % (len(answers), + rdtype, fqdn, ' '.join(str(answer) for answer in answers)) ) - except DNSException as e: + except DNSException: log.debug( - 'IPA: DNS AAAA record lookup failed for %s' % fqdn + 'IPA: DNS %s record lookup failed for %s' % + (rdtype, fqdn) ) - raise errors.DNSNotARecordError() + continue + else: + return + # dns lookup failed in both tries + raise errors.DNSNotARecordError() def has_soa_or_ns_record(domain): |