summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMartin Basti <mbasti@redhat.com>2014-06-30 12:32:31 +0200
committerPetr Viktorin <pviktori@redhat.com>2014-07-03 10:32:09 +0200
commit70224597a846cbe4cc7fe5f3b3cf3cec1e65ebd2 (patch)
tree2efea2c17857304113a7cb2791f707c4daaa8d43
parent33cf958b98dc2d80d17b3de1c145d403df4a3ba3 (diff)
downloadfreeipa-70224597a846cbe4cc7fe5f3b3cf3cec1e65ebd2.tar.gz
freeipa-70224597a846cbe4cc7fe5f3b3cf3cec1e65ebd2.tar.xz
freeipa-70224597a846cbe4cc7fe5f3b3cf3cec1e65ebd2.zip
Add DNSSEC experimental support warning message
Ticket: https://fedorahosted.org/freeipa/ticket/4408 Reviewed-By: Petr Spacek <pspacek@redhat.com>
-rw-r--r--ipalib/messages.py10
-rw-r--r--ipalib/plugins/dns.py19
2 files changed, 29 insertions, 0 deletions
diff --git a/ipalib/messages.py b/ipalib/messages.py
index 3087cf7c9..f637e5b17 100644
--- a/ipalib/messages.py
+++ b/ipalib/messages.py
@@ -147,6 +147,16 @@ class ForwardersWarning(PublicMessage):
u"You may want to use forward zones (dnsforwardzone-*) instead.\n"
u"For more details read the docs.")
+
+class DNSSECWarning(PublicMessage):
+ """
+ **13003** Used when user change DNSSEC settings
+ """
+
+ errno = 13003
+ type = "warning"
+ format = _("DNSSEC support is experimental.\n%(additional_info)s")
+
def iter_messages(variables, base):
"""Return a tuple with all subclasses
"""
diff --git a/ipalib/plugins/dns.py b/ipalib/plugins/dns.py
index a2f618c7f..d9e4781d6 100644
--- a/ipalib/plugins/dns.py
+++ b/ipalib/plugins/dns.py
@@ -2229,6 +2229,23 @@ class dnszone(DNSZoneBase):
messages.add_message(options.get('version', VERSION_WITHOUT_CAPABILITIES),
result, messages.ForwardersWarning())
+ def _warning_dnssec_experimental(self, result, *keys, **options):
+ # add warning when user use option --dnssec
+ if 'idnssecinlinesigning' in options:
+ if options['idnssecinlinesigning'] is True:
+ messages.add_message(options['version'], result,
+ messages.DNSSECWarning(
+ additional_info=_("Manual configuration needed, please "
+ "visit 'http://www.freeipa.org/page/Releases/4.0.0#"
+ "Experimental_DNSSEC_Support'")
+ ))
+ else:
+ messages.add_message(options['version'], result,
+ messages.DNSSECWarning(
+ additional_info=_("If you encounter any problems please "
+ "report them and restart 'named' service on affected IPA "
+ "server.")
+ ))
@register()
@@ -2320,6 +2337,7 @@ class dnszone_add(DNSZoneBase_add):
def execute(self, *keys, **options):
result = super(dnszone_add, self).execute(*keys, **options)
self.obj._warning_forwarding(result, **options)
+ self.obj._warning_dnssec_experimental(result, *keys, **options)
return result
def post_callback(self, ldap, dn, entry_attrs, *keys, **options):
@@ -2402,6 +2420,7 @@ class dnszone_mod(DNSZoneBase_mod):
def execute(self, *keys, **options):
result = super(dnszone_mod, self).execute(*keys, **options)
self.obj._warning_forwarding(result, **options)
+ self.obj._warning_dnssec_experimental(result, *keys, **options)
return result
def post_callback(self, ldap, dn, entry_attrs, *keys, **options):