Bug 766073

Summary: [RFE] DNS Enhancements :: Implement new API for DNS records
Product: Red Hat Enterprise Linux 6 Reporter: Dmitri Pal <dpal>
Component: ipaAssignee: Rob Crittenden <rcritten>
Status: CLOSED ERRATA QA Contact: IDM QE LIST <seceng-idm-qe-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.3CC: jgalipea, mkosek
Target Milestone: rcKeywords: FutureFeature
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-2.2.0-1.el6 Doc Type: Enhancement
Doc Text:
No documentation needed.
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-06-20 13:27:46 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 736854    

Description Dmitri Pal 2011-12-09 23:30:13 UTC
This ticket should track an implementation of new per record interface for DNS plugin. The interface will be based on a proposal acked on the freeipa-devel list.

The design proposal was tracked in ticket #1766.

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/2082

Comment 4 Jenny Severance 2011-12-12 16:40:54 UTC
Can we add design links for the new CLIs?

Comment 5 Jenny Severance 2011-12-12 16:42:04 UTC
looks like most of the information can be found here ...
https://fedorahosted.org/freeipa/ticket/1766

Comment 6 Martin Kosek 2011-12-13 08:22:38 UTC
There is also a design page I created in freeipa.org wiki:

http://www.freeipa.org/page/IPAv3_DNS_Interface_Design

Comment 7 Martin Kosek 2012-01-12 09:53:30 UTC
Fixed upstream:

master:
52ea3a6b2958875da6370433d14509bdbd4c4943
1f36ab1b780f488869f2880b79a3127840438cc9
2188dae0c91712015cd5947fc9d61597ec2e95fa
a22620c832d2525723a70f084c9eccfa13dc66d2

ipa-2-2:
f8881bbb7410a1261e4375cd124cb88c9fb38627
bff9101a9fe8eecbe01d9aa33808363f6ed8b3fa
688f630c6be44ae3fb977ec0f280ffde9179fba8
55395770456e72fedd935b01a64c2f635bd81394

Comment 10 Martin Kosek 2012-04-19 13:46:11 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
No documentation needed.

Comment 11 Jenny Severance 2012-05-07 17:10:48 UTC
new api has caused no new regressions ::

================ final pass/fail report =================
   Test Date: Tue May  1 14:51:17 EDT 2012 
   Total : [180] 
   Passed: [179] 
   Failed: [1] 
   Abort : [0]
   Crash : [0]
---------------------------------------------------------
   [   PASS   ]      DNS SETUP
   [   PASS   ]      dns acceptance setup
   [   PASS   ]      ipa-dns-replicaprepare-01 Add during replica prepare
   [   PASS   ]      ipa-dns-replicaprepare-02 check forward ip of the replica was created in dns correctly with ping
   [   PASS   ]      ipa-dns-replicaprepare-03 check forward ip of replica was created in dns correctly with dig
   [   PASS   ]      ipa-dns-replicaprepare-04 check reverse entry of the replica was created in dns correctly with dig
   [   PASS   ]      ipa-dns-replicaprepare-05 check forward ip of replica is resolvable by dnsrecord-show
   [   PASS   ]      ipa-dns-replicaprepare-06 check reverse ip of the replica is resolvable by dnsrecord-show
   [   PASS   ]      ipa-dns-zone-01 create a new zone
   [   PASS   ]      ipa-dns-zone-02 try to create a new zone using a bad serial number
   [   PASS   ]      ipa-dns-zone-03 try to create a new zone using a bad refresh
   [   PASS   ]      ipa-dns-zone-04 try to create a new zone using a bad retry
   [   PASS   ]      ipa-dns-zone-05 try to create a new zone using a bad expire
   [   PASS   ]      ipa-dns-zone-06 try to create a new zone using a bad minimum
   [   PASS   ]      ipa-dns-zone-07 try to create a new zone using a bad ttl
   [   PASS   ]      ipa-dns-zone-08 checking to ensure that the new zone got created with the correct name-server
   [   PASS   ]      ipa-dns-zone-09 checking to ensure that the new zone got created with the correct email
   [   PASS   ]      ipa-dns-zone-10 checking to ensure that the new zone got created with the correct serial number
   [   PASS   ]      ipa-dns-zone-11 checking to ensure that the new zone got created with the correct refresh
   [   PASS   ]      ipa-dns-zone-12 checking to ensure that the new zone got created with the correct retry
   [   PASS   ]      ipa-dns-zone-13 checking to ensure that the new zone got created with the correct expire
   [   PASS   ]      ipa-dns-zone-14 checking to ensure that the new zone got created with the correct minimum
   [   PASS   ]      ipa-dns-zone-15 checking to ensure that the new zone got created with the correct ttl
   [   PASS   ]      ipa-dns-zone-16 checking to with dig to ensure that the new zone got created with the correct name server
   [   PASS   ]      ipa-dns-zone-17 checking to with dig to ensure that the new zone got created with the correct email
   [   PASS   ]      ipa-dns-zone-18 checking to with dig to ensure that the new zone got created with the correct serial number
   [   PASS   ]      ipa-dns-zone-19 checking to with dig to ensure that the new zone got created with the correct refresh
   [   PASS   ]      ipa-dns-zone-20 checking to with dig to ensure that the new zone got created with the correct retry interval
   [   PASS   ]      ipa-dns-zone-21 checking to with dig to ensure that the new zone got created with the correct expire
   [   PASS   ]      ipa-dns-zone-22 checking to with dig to ensure that the new zone got created with the correct minimum
   [   PASS   ]      ipa-dns-zone-23 checking to with dig to ensure that the new zone got created with the correct ttl
   [   PASS   ]      ipa-dns-arecord-01 add record of type A
   [   PASS   ]      ipa-dns-arecord-02 make sure that IPA saved record type A
   [   PASS   ]      ipa-dns-arecord-03 make sure that dig can find the record type A
   [   PASS   ]      ipa-dns-arecord-04 delete record of type A
   [   PASS   ]      ipa-dns-arecord-05 add record of type multiple A records
   [   PASS   ]      ipa-dns-arecord-06 make sure that IPA saved the first type A record
   [   PASS   ]      ipa-dns-arecord-07 make sure that dig can find the first a record
   [   PASS   ]      ipa-dns-arecord-08 make sure that IPA saved the second type A record
   [   PASS   ]      ipa-dns-arecord-09 make sure that dig can find the second a record
   [   PASS   ]      ipa-dns-arecord-10 delete record of type multiple A
   [   PASS   ]      ipa-dns-arecord-11 make sure that IPA removed the first type A record
   [   PASS   ]      ipa-dns-arecord-12 make sure that dig cannot find the first a record
   [   PASS   ]      ipa-dns-arecord-13 make sure that IPA removed the second type A record
   [   PASS   ]      ipa-dns-arecord-14 make sure that dig can not find the second a record
   [   PASS   ]      ipa-dns-aaaarecord-01 add record of type AAAA
   [   PASS   ]      ipa-dns-aaaarecord-02 make sure that IPA saved record type AAAA
   [   PASS   ]      ipa-dns-aaaarecord-03 make sure that dig can find the record type AAAA
   [   PASS   ]      ipa-dns-aaaarecord-04 delete record of type AAAA
   [   PASS   ]      ipa-dns-aaaarecord-05 make sure that IPA deleted record type AAAA
   [   PASS   ]      ipa-dns-aaaarecord-06 make sure that dig can not find the record type AAAA
   [   PASS   ]      ipa-dns-aaaarecord-07 add record of type bad AAAA
   [   PASS   ]      ipa-dns-aaaarecord-08 make sure that IPA did not save record type AAAA
   [   PASS   ]      ipa-dns-aaaarecord-09 make sure that dig can not find the record type AAAA
   [   PASS   ]      ipa-dns-aaaarecord-10 add record of type bad AAAA
   [   PASS   ]      ipa-dns-aaaarecord-11 make sure that IPA did not save record type AAAA
   [   PASS   ]      ipa-dns-aaaarecord-12 make sure that dig can not find the record type AAAA
   [   PASS   ]      ipa-dns-iafsbdrecord-01 add record of type afsdb
   [   PASS   ]      ipa-dns-iafsbdrecord-02 make sure that IPA saved record type afsdb
   [   PASS   ]      ipa-dns-iafsbdrecord-03 make sure that dig can find the record type afsdb
   [   PASS   ]      ipa-dns-iafsbdrecord-04 delete record of type afsdb
   [   PASS   ]      ipa-dns-iafsbdrecord-05 make sure that IPA deleted record type afsdb
   [   PASS   ]      ipa-dns-iafsbdrecord-06 make sure that dig can not find the record type afsdb
   [   PASS   ]      ipa-dns-cnamerecord-01 add record of type cname
   [   PASS   ]      ipa-dns-cnamerecord-02 make sure that IPA saved record type cname
   [   PASS   ]      ipa-dns-cnamerecord-03 make sure that dig can find the record type cname
   [   PASS   ]      ipa-dns-cnamerecord-04 delete record of type cname
   [   PASS   ]      ipa-dns-cnamerecord-05 make sure that IPA deleted record type cname
   [   PASS   ]      ipa-dns-cnamerecord-06 make sure that dig can not find the record type cname
   [   PASS   ]      ipa-dns-txtrecord-01 add record of type txt
   [   PASS   ]      ipa-dns-txtrecord-02 make sure that IPA saved record type txt
   [   PASS   ]      ipa-dns-txtrecord-03 make sure that dig can find the record type txt
   [   PASS   ]      ipa-dns-txtrecord-04 delete record of type txt
   [   PASS   ]      ipa-dns-txtrecord-05 make sure that IPA deleted record type txd
   [   PASS   ]      ipa-dns-txtrecord-06 make sure that dig can not find the record type txt
   [   PASS   ]      ipa-dns-svrrecord-01 add record of type srv
   [   PASS   ]      ipa-dns-svrrecord-02 make sure that IPA saved record type srv
   [   PASS   ]      ipa-dns-svrrecord-03 make sure that dig can find the record type srv
   [   PASS   ]      ipa-dns-svrrecord-04 delete record of type srv
   [   PASS   ]      ipa-dns-svrrecord-05 make sure that IPA deleted record type srv
   [   PASS   ]      ipa-dns-svrrecord-06 make sure that dig can not find the record type srv
   [   PASS   ]      ipa-dns-mxrecord-01 add record of type MX
   [   PASS   ]      ipa-dns-mxrecord-02 make sure that IPA saved record type MX
   [   PASS   ]      ipa-dns-mxrecord-03 make sure that dig can find the record type MX
   [   PASS   ]      ipa-dns-mxrecord-04 delete record of type MX
   [   PASS   ]      ipa-dns-mxrecord-05 make sure that IPA deleted record type MX
   [   PASS   ]      ipa-dns-mxrecord-06 make sure that dig can not find the record type MX
   [   PASS   ]      ipa-dns-ptrzone-01 try to create a new ptr zone using a bad serial number
   [   PASS   ]      ipa-dns-ptrzone-02 try to create a new zone using a bad refresh
   [   PASS   ]      ipa-dns-ptrzone-03 try to create a new PTR zone
   [   PASS   ]      ipa-dns-ptrzone-04 checking to ensure that the new PTR zone got created with the correct name-server
   [   PASS   ]      ipa-dns-ptrzone-05 checking to ensure that the new PTR zone got created with the correct email
   [   PASS   ]      ipa-dns-ptrzone-06 checking to ensure that the new PTR zone got created with the correct serial number
   [   PASS   ]      ipa-dns-ptrzone-07 checking to ensure that the new PTR zone got created with the correct refresh
   [   PASS   ]      ipa-dns-ptrzone-08 checking to ensure that the new PTR zone got created with the correct retry
   [   PASS   ]      ipa-dns-ptrzone-09 checking to ensure that the new PTR zone got created with the correct expire
   [   PASS   ]      ipa-dns-ptrzone-10 checking to ensure that the new PTR zone got created with the correct minimum
   [   PASS   ]      ipa-dns-ptrzone-11 checking to ensure that the new PTR zone got created with the correct ttl
   [   PASS   ]      ipa-dns-ptrzone-12 checking to with dig to ensure that the new PTR zone got created with the correct name server
   [   PASS   ]      ipa-dns-ptrzone-13 checking to with dig to ensure that the new PTR zone got created with the correct email
   [   PASS   ]      ipa-dns-ptrzone-14 checking to with dig to ensure that the new PTR zone got created with the correct serial number
   [   PASS   ]      ipa-dns-ptrzone-15 checking to with dig to ensure that the new PTR zone got created with the correct refresh
   [   PASS   ]      ipa-dns-ptrzone-16 checking to with dig to ensure that the new PTR zone got created with the correct retry interval
   [   PASS   ]      ipa-dns-ptrzone-17 checking to with dig to ensure that the new PTR zone got created with the correct expire
   [   PASS   ]      ipa-dns-ptrzone-18 checking to with dig to ensure that the new PTR zone got created with the correct minimum
   [   PASS   ]      ipa-dns-ptrzone-19 checking to with dig to ensure that the new PTR zone got created with the correct ttl
   [   PASS   ]      ipa-dns-ptrrecord-01 add record of type PTR
   [   PASS   ]      ipa-dns-ptrrecord-02 make sure that IPA saved record type PTR
   [   PASS   ]      ipa-dns-ptrrecord-03 make sure that dig can find the record type PTR
   [   PASS   ]      ipa-dns-ptrrecord-04 delete record of type PTR
   [   PASS   ]      ipa-dns-ptrrecord-05 make sure that IPA deleted record type PTR
   [   PASS   ]      ipa-dns-ptrrecord-06 make sure that dig can not find the record type PTR
   [   PASS   ]      ipa-dns-naptrrecord-01 add record of type NAPTR
   [   PASS   ]      ipa-dns-naptrrecord-02 make sure that IPA saved record type NAPTR
   [   PASS   ]      ipa-dns-naptrrecord-03 make sure that dig can find the record type NAPTR
   [   PASS   ]      ipa-dns-naptrrecord-04 delete record of type NAPTR
   [   PASS   ]      ipa-dns-naptrrecord-05 make sure that IPA deleted record type NAPTR
   [   PASS   ]      ipa-dns-naptrrecord-06 make sure that dig can not find the record type NAPTR
   [   PASS   ]      ipa-dns-dnamerecord-01 add record of type dname
   [   PASS   ]      ipa-dns-dnamerecord-02 make sure that IPA saved record type dname
   [   PASS   ]      ipa-dns-dnamerecord-03 make sure that dig can find the record type dname
   [   PASS   ]      ipa-dns-dnamerecord-04 delete record of type dname
   [   PASS   ]      ipa-dns-dnamerecord-05 make sure that IPA deleted record type dname
   [   PASS   ]      ipa-dns-dnamerecord-06 make sure that dig can not find the record type dname
   [   PASS   ]      ipa-dns-certrecord-01 add record of type cert
   [   PASS   ]      ipa-dns-certrecord-02 make sure that IPA saved record type cert
   [   PASS   ]      ipa-dns-certrecord-03 make sure that dig can find the record type cert
   [   PASS   ]      ipa-dns-certrecord-04 delete record of type cert
   [   PASS   ]      ipa-dns-certrecord-05 make sure that IPA deleted record type cert
   [   PASS   ]      ipa-dns-certrecord-06 make sure that dig can not find the record type cert
   [   PASS   ]      ipa-dns-locrecord-01 add record of type loc
   [   PASS   ]      ipa-dns-locrecord-02 make sure that IPA saved record type loc
   [   PASS   ]      ipa-dns-locrecord-03 make sure that dig can find the record type loc
   [   PASS   ]      ipa-dns-locrecord-04 delete record of type loc
   [   PASS   ]      ipa-dns-locrecord-05 make sure that IPA deleted record type loc
   [   PASS   ]      ipa-dns-locrecord-06 make sure that dig can not find the record type loc
   [   PASS   ]      ipa-dns-kxrecord-01 add record of type kx
   [   PASS   ]      ipa-dns-kxrecord-02 make sure that IPA saved record type kx
   [   PASS   ]      ipa-dns-kxrecord-03 make sure that dig can find the record type kx
   [   PASS   ]      ipa-dns-kxrecord-04 delete record of type kx
   [   PASS   ]      ipa-dns-kxrecord-05 make sure that IPA deleted record type kx
   [   PASS   ]      ipa-dns-kxrecord-06 make sure that dig can not find the record type kx
   [   PASS   ]      ipa-dns-kxrecord-07 add record of type bad kx
   [   PASS   ]      ipa-dns-kxrecord-08 make sure that IPA saved record type kx
   [   PASS   ]      ipa-dns-kxrecord-09 add record of type bad kx
   [   PASS   ]      ipa-dns-kxrecord-10 make sure that IPA saved record type kx
   [   PASS   ]      dns acceptance cleanup
   [   PASS   ]      dns pkey setup
   [   PASS   ]      ipa-dns-pkey-001 --pkey-only test of ipa dnsrecord-find a records
   [   PASS   ]      ipa-dns-pkey-002 --pkey-only test of ipa dnsrecord-find AAAA records
   [   PASS   ]      ipa-dns-pkey-003 --pkey-only test of ipa dnsrecord-find asfdb records
   [   PASS   ]      ipa-dns-pkey-004 --pkey-only test of ipa dnsrecord-find cname records
   [   PASS   ]      ipa-dns-pkey-005 --pkey-only test of ipa dnsrecord-find txt records
   [   PASS   ]      ipa-dns-pkey-006 --pkey-only test of ipa dnsrecord-find _srv records
   [   PASS   ]      ipa-dns-pkey-007 --pkey-only test of ipa dnsrecord-find @ records
   [   PASS   ]      ipa-dns-pkey-008 --pkey-only negative test of ipa dnsrecord-find AAAA records
   [   PASS   ]      dns pkey cleanup
   [   PASS   ]      dns bug setup
   [   PASS   ]      bz750947 Adding loc records to a ipa-dns server breaks name resolution for some other records
   [   PASS   ]      bz789987 Correction in error message while deleting a invalid record.
   [   PASS   ]      bz789919 IP address with just 3 octets are accepted as valid addresses in --a-rec option
   [   PASS   ]      bz790318 dnsrecord-add does not validate the record names with space in between.
   [   PASS   ]      bz738788 ipa dnsrecord-add allows invalid kx records
   [   PASS   ]      bz766075 DNS zone dynamic update is changed to false if --allow-dynupdate not specified
   [   PASS   ]      bz751776 Skip invalid record in a zone instead of refusing to load entire zone
   [   PASS   ]      bz797561 Bool attributes used in setattr/addattr/delattr options are not encoded properly
   [   PASS   ]      bz783272 Confusing error message when adding a record to non-existent zone
   [   PASS   ]      bz750806 dnszone-mod and dnszone-add does not format administrator's email properly
   [   PASS   ]      bz733371 DNS zones are not loaded when idnsAllowQuery/idnsAllowTransfer is filled
   [   PASS   ]      bz767492 The plugin doesn't delete zone when it is deleted in LDAP and zone_refresh is set
   [   PASS   ]      bz767494 Automatically update corresponding PTR record when A/AAAA record is updated
   [   PASS   ]      bz804562 --ns-hostname option does not check A/AAAA record of the provided hostname.
   [   PASS   ]      bz795414 Dynamic database plug-in cannot change BIND root zone forwarders while plug-in start
   [   PASS   ]      bz805427 idnssoaserial does not honour the recommended syntax in rfc1912.
   [   PASS   ]      bz805871 Incorrect SOA serial number set for forward zone during ipa-server installation.
   [   PASS   ]      bz701677 Allow specifying query and transfer policy settings for a zone.
   [   PASS   ]      bz804572 Irrelevant error message when per-part modification mode is used during dnsrecord-mod operation without specifying the record.
   [   PASS   ]      dns bug cleanup
   [   PASS   ]      DNS CLEANUP

   [   FAIL   ]      bz804619 DNS zone serial number is not updated

version ::
ipa-server-2.2.0-11.el6

Comment 13 errata-xmlrpc 2012-06-20 13:27:46 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0819.html