Red Hat Bugzilla – Bug 1108233
[RFE] ipa dnsrecord-add should allow internationalized names
Last modified: 2015-03-05 05:12:16 EST
This bug is created as a clone of upstream ticket: https://fedorahosted.org/freeipa/ticket/3169 ipa dnsrecord-add does not allow to create internationalized names Both utf8 and punycode names are refused. Tested with: ätest and the equivalent punycode: xn--test-koa Both are currently refused. I suspect the latter is just a mistake in validating names because -- is not an invalid combination. However we should accept the former and simply internally convert from utf8 to punycode before storing the record.
This request is already fixed in upstream FreeIPA project. Please refer to the linked ticket for additional details and related commits.
Verified using: bind-dyndb-ldap-6.0-2.el7.x86_64 ipa-server-4.1.0-13.el7.x86_64 # ipa dnszone-add "kůň.cz" Zone name: kůň.cz. Active zone: TRUE Authoritative nameserver: hp-dl380pgen8-02-vm-5.testrelm.test. Administrator e-mail address: hostmaster SOA serial: 1421244075 SOA refresh: 3600 SOA retry: 900 SOA expire: 1209600 SOA minimum: 3600 BIND update policy: grant TESTRELM.TEST krb5-self * A; grant TESTRELM.TEST krb5-self * AAAA; grant TESTRELM.TEST krb5-self * SSHFP; Dynamic update: FALSE Allow query: any; Allow transfer: none; # ipa dnsrecord-add kůň.cz žluťoučký --a-rec 192.0.2.2 Record name: žluťoučký A record: 192.0.2.2 # host žluťoučký.kůň.cz žluťoučký.kůň.cz has address 192.0.2.2 # ipa dnsrecord-find "kůň.cz" Record name: @ NS record: hp-dl380pgen8-02-vm-5.testrelm.test. Record name: žluťoučký A record: 192.0.2.2 ---------------------------- Number of entries returned 2 ---------------------------- # ipa dnszone-show "kůň.cz" --all dn: idnsname=xn--k-qla0j.cz.,cn=dns,dc=testrelm,dc=test Zone name: kůň.cz. Active zone: TRUE Authoritative nameserver: hp-dl380pgen8-02-vm-5.testrelm.test. Administrator e-mail address: hostmaster SOA serial: 1421244094 SOA refresh: 3600 SOA retry: 900 SOA expire: 1209600 SOA minimum: 3600 BIND update policy: grant TESTRELM.TEST krb5-self * A; grant TESTRELM.TEST krb5-self * AAAA; grant TESTRELM.TEST krb5-self * SSHFP; Dynamic update: FALSE Allow query: any; Allow transfer: none; nsrecord: hp-dl380pgen8-02-vm-5.testrelm.test. objectclass: idnszone, top, idnsrecord
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0442.html