Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1114013

Summary: [RFE] Separate master and forward DNS zones
Product: Red Hat Enterprise Linux 7 Reporter: Martin Kosek <mkosek>
Component: ipaAssignee: Martin Kosek <mkosek>
Status: CLOSED ERRATA QA Contact: Namita Soman <nsoman>
Severity: unspecified Docs Contact:
Priority: medium    
Version: 7.0CC: pviktori, rcritten, spoore, xdong
Target Milestone: rcKeywords: FutureFeature
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-4.1.0-7.el7 Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-03-05 10:12:51 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1168131, 1175384    
Bug Blocks:    
Attachments:
Description Flags
DNS Forward Zones page none

Description Martin Kosek 2014-06-27 13:02:06 UTC 
This bug is created as a clone of upstream ticket:
https://fedorahosted.org/freeipa/ticket/3210

Now we are mixing zone types 'master' and 'forward' in the single thing (in IPA UI and in objectClass 'idnsZone').

Zone types recognized in BIND:
http://www.zytrax.com/books/dns/ch7/zone.html#type

Current situation leads to confusion for users because:
* Behaviour is not well defined (in BIND it is possible to set forwarders for 'master' zones with different effect than for 'forward' zones)
* BIND documentation is not applicable
* Users are forced to create imaginary SOA record (which is never seen by client) even for 'forward' zones
* It is possible to create subordinate records in 'forward' zone but these records are ignored

Proposal:
* Use existing objectClass 'idnsZone' for master zones (no change).
* Create a new objectClass 'idnsForwardZone'
  * mandatory single-value attribute idnsName (for RDN, same as in 'idnsZone')
  * mandatory multi-value attribute idnsForwarders (same as in 'idnsZone')
  * optional single-value attribute idnsForwardPolicy (same as in 'idnsZone')
Comment 1 Martin Kosek 2014-06-27 13:11:00 UTC 
DNS forward zones are now supported upstream:

49068ade92b3fa4874b3107923bbd5b84e1a04f3 Separate master and forward DNS zones
266015c3e28c04894cd3a52ea2f99c25eef2c6a9 Prevent commands to modify different type of a zone
727f5f33732df252fa99d5c168d6727589ee6076 Create BASE zone class
11c250a6125da300f85880e090e5db1659078daa Tests DNS: forward zones

Old master zones with forward are converted to DNS forward zones on when the first IPA server is upgraded to 4.0:

master:

c1f3fd6831c47a2672f37e12db149be1b1122d75 Added upgrade step executed before schmema is upgraded
aa2ef07b8c74d05e8a83928dab4b5cae8722a52f Upgrade special master zones to forward zones

We plan to release warnings when DNS master zones with a forwarder are being created in IPA 4.0 server as there is a change in behavior.
Comment 2 Petr Viktorin (pviktori) 2014-07-09 08:55:13 UTC 
Fixed upstream:
master: https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=49068ade92b3fa4874b3107923bbd5b84e1a04f3

and related patches (see https://fedorahosted.org/freeipa/ticket/3210)
Comment 3 Martin Kosek 2014-07-18 10:03:48 UTC 
Related upstream information for the feature:

http://www.freeipa.org/page/Releases/4.0.0#DNS_Master_and_Forward_Zones
Comment 5 Martin Kosek 2014-11-19 17:07:38 UTC 
Linking with

https://fedorahosted.org/freeipa/ticket/4647

which fixes the error message.
Comment 6 Martin Kosek 2014-11-19 17:08:18 UTC 
Fixed upstream:

master:
310e46452c41223afa0b1b318c503574567df105 Fix warning message should not contain CLI commands

ipa-4-1:
38130c632bda27711407f5c74f26031da5b52ad6 Fix warning message should not contain CLI commands
Comment 7 Martin Kosek 2014-12-18 08:15:41 UTC 
Please be aware of new bug related to migration from RHEL-6.x to RHEL-7.1 directly - Bug 1175384.
Comment 8 Scott Poore 2015-01-29 15:35:13 UTC 
Verified CLI operability using upstream test suite results against RHEL7.1 build with IPA version listed below.

Version ::

ipa-server-4.1.0-15.el7.x86_64


Results ::

Note, failures below are due to different version of server and test package.  These can be ignored.

+-----------------------------------------------------------------------------------------+
     Test:[/ipa-server/rhel71/ipa-integration-testing/root]: [ Pass(237/240): 98% ] 
 +-----------------------------------------------------------------------------------------+
:: [   PASS   ]   ipa-integration-testing-startup: installing ipa-tests and other required packages
:: [   FAIL   ]   ipa-integration-testing-master: test_xmlrpc_dns_plugin_py
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns: Nose class (no docstring)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns pre-cleanup[0]: ('dnszone_del', [u'dnszone.test', u'zone2.test', u'zone3.test', u'zone4.test.', u'zone--5.test.', u'31.16.172.in-addr.arpa.', u'30.15.172.in-addr.arpa.', u'70.16.172.in-addr.arpa.', u'128/25.70.16.172.in-addr.arpa.', u'\u010d.test.', u'15.16.172.in-addr.arpa.', u'master.find.test.'], {'continue': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns pre-cleanup[1]: ('dnsforwardzone_del', [u'fwzone1.test.', u'forward.find.test.', u'*.wildcardforwardzone.test.'], {'continue': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns pre-cleanup[2]: ('dnsconfig_mod', [], {'idnsallowsyncptr': None, 'idnsforwarders': None, 'idnsforwardpolicy': None})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns pre-cleanup[3]: ('permission_del', [u'Manage DNS zone dnszone.test.', u'Manage DNS zone \u010d.test.', u'Manage DNS zone fwzone1.test.', u'Manage DNS zone 128/25.70.16.172.in-addr.arpa.'], {'force': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[0]: dnszone_show: Try to retrieve non-existent zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[1]: dnszone_show: Try to retrieve non-existent IDN zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[2]: dnszone_mod: Try to update non-existent zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[3]: dnszone_del: Try to delete non-existent zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[4]: dnszone_add: Create zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[5]: dnszone_add: Try to create duplicate zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[6]: dnszone_add: Try to create a zone with nonexistent NS entry
:: [   FAIL   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[7]: dnszone_add: Create a zone with nonexistent NS entry with --force
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[8]: dnszone_mod: Try to remove value of "idnssomrname" attribute using dnszone-mod --name-server=
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[9]: dnszone_add: Create a zone with upper case name
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[10]: dnszone_add: Create a zone with consecutive dash characters
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[11]: dnszone_show: Retrieve zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[12]: dnszone_mod: Update zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[13]: dnszone_mod: Try to add invalid NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[14]: dnszone_mod: Try to add invalid NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[15]: dnszone_mod: Try to add invalid NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[16]: dnszone_mod: Try to add invalid NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[17]: dnszone_mod: Try to add invalid NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[18]: dnszone_mod: Try to add invalid NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[19]: dnszone_mod: Add NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[20]: dnszone_mod: Delete NSEC3PARAM record from zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[21]: dnszone_add: Try to create reverse zone u'31.16.172.in-addr.arpa.' with NS record in it
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[22]: dnszone_add: Create reverse zone u'31.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[23]: dnszone_find: Search for zones with admin email u'root.dnszone.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[24]: dnszone_find: Search for zones with admin email u'root.dnszone.test.' with --forward-only
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[25]: dnszone_del: Delete reverse zone u'31.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[26]: dnsrecord_show: Try to retrieve non-existent record u'testdnsres' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[27]: dnsrecord_del: Try to delete non-existent record u'testdnsres' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[28]: dnsrecord_del: Try to delete root zone record '@' in u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[29]: dnsrecord_add: Create record u'dnszone.test' in zone u'testdnsres'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[30]: dnsrecord_find: Search for all records in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[31]: dnsrecord_add: Add A record to u'testdnsres' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[32]: dnsrecord_del: Remove A record from u'testdnsres' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[33]: dnsrecord_mod: Add AAAA record to u'testdnsres' in zone u'dnszone.test' using dnsrecord_mod
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[34]: dnsrecord_mod: Try to modify nonexistent record in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[35]: dnsrecord_mod: Modify AAAA record in u'testdnsres' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[36]: dnsrecord_mod: Remove AAAA record from u'testdnsres' in zone u'dnszone.test' using dnsrecord_mod
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[37]: dnsrecord_add: Try to add invalid MX record to zone u'dnszone.test' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[38]: dnsrecord_add: Add MX record to zone u'dnszone.test' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[39]: dnsrecord_add: Try to add invalid SRV record to zone u'dnszone.test' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[40]: dnsrecord_add: Try to add SRV record to zone u'dnszone.test' both via parts and a raw value
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[41]: dnsrecord_add: Add SRV record to zone u'dnszone.test' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[42]: dnsrecord_mod: Try to modify SRV record in zone u'dnszone.test' without specifying modified value
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[43]: dnsrecord_mod: Try to modify SRV record in zone u'dnszone.test' with non-existent modified value
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[44]: dnsrecord_mod: Try to modify SRV record in zone u'dnszone.test' with invalid part value
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[45]: dnsrecord_mod: Modify SRV record in zone u'dnszone.test' using parts
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[46]: dnsrecord_add: Try to add invalid LOC record to zone u'dnszone.test' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[47]: dnsrecord_add: Add LOC record to zone u'dnszone.test' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[48]: dnsrecord_add: Try to add CNAME record to u'testdnsres' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[49]: dnsrecord_add: Try to add multiple CNAME record u'testcnamerec' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[50]: dnsrecord_add: Add CNAME record to u'testcnamerec' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[51]: dnsrecord_add: Try to add other record to CNAME record u'testcnamerec' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[52]: dnsrecord_mod: Try to add other record to CNAME record u'testcnamerec' using dnsrecord_mod
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[53]: dnsrecord_mod: Add A record and delete CNAME record in u'testcnamerec' with dnsrecord_mod
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[54]: dnsrecord_add: Try to add multiple DNAME records to u'testdns-dname' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[55]: dnsrecord_add: Add DNAME record to u'testdns-dname' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[56]: dnsrecord_add: Try to add CNAME record to u'testdns-dname' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[57]: dnsrecord_add: Try to add NS record to u'testdns-dname' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[58]: dnsrecord_add: Add NS+DNAME record to u'zone2.test' zone record using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[59]: dnszone_del: Delete zone u'zone2.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[60]: dnsrecord_add: Try to add invalid KX record u'testdnsres' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[61]: dnsrecord_add: Add KX record to u'testdnsres' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[62]: dnsrecord_add: Add TXT record to u'testdnsres' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[63]: dnsrecord_add: Try to add unresolvable absolute NS record to u'testdnsres-ns' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[64]: dnsrecord_add: Try to add unresolvable relative NS record to u'testdnsres-ns' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[65]: dnsrecord_add: Add unresolvable NS record with --force to u'testdnsres-ns' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[66]: dnsrecord_mod: Try to to rename DNS zone u'dnszone.test' root record
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[67]: dnsrecord_mod: Rename DNS record u'testdnsres-ns' to u'testdnsres-ns-renamed'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[68]: dnsrecord_del: Delete record u'testdnsres' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[69]: dnsrecord_add: Add DLV record to u'dlv' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[70]: dnsrecord_add: Try to add DS record to zone u'dnszone.test' apex, using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[71]: dnsrecord_add: Try to add DS record u'ds' without NS record in RRset, using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[72]: dnsrecord_add: Add NS record to u'ds' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[73]: dnsrecord_add: Add DS record to u'ds' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[74]: dnsrecord_del: Try to delete NS record (with DS record) u'ds' using dnsrecord_del
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[75]: dnsrecord_del: Delete NS+DS record u'ds' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[76]: dnsrecord_del: Delete record u'dlv' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[77]: dnsrecord_add: Try to add invalid TLSA record to u'tlsa' using dnsrecord_add (1)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[78]: dnsrecord_add: Try to add invalid TLSA record to u'tlsa' using dnsrecord_add (2)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[79]: dnsrecord_add: Try to add invalid TLSA record to u'tlsa' using dnsrecord_add (3)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[80]: dnsrecord_add: Add TLSA record to u'tlsa' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[81]: dnsrecord_mod: Remove record using dnsrecord-mod u'tlsa' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[82]: dnszone_add: Try to create a reverse zone from invalid IP
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[83]: dnszone_add: Create reverse zone from IP/netmask u'172.16.31.0' using name_from_ip option
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[84]: dnszone_add: Create reverse zone from IP u'172.15.30.0/24' using name_from_ip option
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[85]: dnsrecord_add: Add PTR record u'80' to u'31.16.172.in-addr.arpa.' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[86]: dnsrecord_show: Show record u'80' in zone u'31.16.172.in-addr.arpa.' with --structured and --all options
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[87]: dnsconfig_mod: Update global DNS settings
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[88]: dnszone_mod: Try to add invalid allow-query to zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[89]: dnszone_mod: Add allow-query ACL to zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[90]: dnszone_mod: Try to add invalid allow-transfer to zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[91]: dnszone_mod: Add allow-transer ACL to zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[92]: dnszone_mod: Set SOA serial of zone u'dnszone.test' to high number
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[93]: dnsrecord_add: Try to create duplicate PTR record for u'testdnsres' with --a-create-reverse
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[94]: dnsrecord_add: Create A record u'testdnsres' in zone u'dnszone.test' with --a-create-reverse
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[95]: dnsrecord_show: Check reverse record for u'testdnsres' created via --a-create-reverse
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[96]: dnszone_add_permission: Try to add per-zone permission for unknown zone
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[97]: dnszone_add_permission: Add per-zone permission for zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[98]: dnszone_add_permission: Try to add duplicate per-zone permission for zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[99]: permission_show: Make sure the permission was created u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[100]: permission_show: Retrieve the permission u'dnszone.test' with --all --raw
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[101]: dnszone_remove_permission: Try to remove per-zone permission for unknown zone
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[102]: dnszone_remove_permission: Remove per-zone permission for zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[103]: permission_show: Make sure the permission for zone u'dnszone.test' was deleted
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[104]: dnszone_remove_permission: Try to remove non-existent per-zone permission for zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[105]: dnszone_add: Try to create zone u'zone3.test' with relative nameserver
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[106]: dnszone_add: Try to create zone u'zone3.test' with nameserver in the zone itself
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[107]: dnszone_add: Create zone u'zone3.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[108]: dnsrecord_add: Add A record to u'ns2' in zone u'zone3.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[109]: dnszone_add: Create reverse zone u'70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[110]: dnszone_add: Create classless reverse zone u'128/25.70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[111]: dnszone_add_permission: Add per-zone permission for classless zone u'128/25.70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[112]: dnszone_remove_permission: Remove per-zone permission for classless zone u'128/25.70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[113]: dnsrecord_add: Add NS record to u'128/28' in revzone u'70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[114]: dnsrecord_add: Add CNAME record to u'129' in revzone u'70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[115]: dnsrecord_add: Add PTR record to u'129' in revzone u'128/25.70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[116]: dnszone_add: Create IDN zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[117]: dnszone_show: Retrieve zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[118]: dnszone_show: Retrieve zone raw u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[119]: dnszone_find: Find zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[120]: dnszone_find: Find zone u'xn--bea.test.' raw
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[121]: dnszone_mod: Update zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[122]: dnszone_add: Create reverse zone u'15.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[123]: dnszone_del: Delete reverse zone u'15.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[124]: dnszone_find: Search for zones with name u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[125]: dnsrecord_show: Try to retrieve non-existent record u'sk\xfa\u0161ka' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[126]: dnsrecord_add: Create record u'\u010d.test.' in zone u'sk\xfa\u0161ka'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[127]: dnsrecord_find: Search for all records in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[128]: dnsrecord_find: Search for all records in zone u'\u010d.test.' with --pkey-only
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[129]: dnsrecord_find: Find u'\u010d.test.' record in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[130]: dnsrecord_find: Find u'sk\xfa\u0161ka' record in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[131]: dnsrecord_find: Find u'sk\xfa\u0161ka' record in zone u'\u010d.test.' with --pkey-only
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[132]: dnsrecord_find: Find raw u'sk\xfa\u0161ka' record in zone u'\u010d.test.' with --pkey-only
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[133]: dnsrecord_find: Find raw u'xn--skka-rra23d' record in zone u'\u010d.test.' with --pkey-only
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[134]: dnsrecord_add: Add A record to u'sk\xfa\u0161ka' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[135]: dnsrecord_del: Remove A record from u'sk\xfa\u0161ka' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[136]: dnsrecord_add: Add MX record to zone u'\u010d.test.' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[137]: dnsrecord_add: Add MX record (2) to zone u'\u010d.test.' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[138]: dnsrecord_del: Remove MX record (2) from zone u'\u010d.test.' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[139]: dnsrecord_add: Add KX record to zone u'\u010d.test.' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[140]: dnsrecord_show: Retrieve raw zone record of zone u'\u010d.test.' using dnsrecord_show
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[141]: dnsrecord_add: Add CNAME record to u'\u0161\u0161' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[142]: dnsrecord_show: Show raw record u'\u0161\u0161' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[143]: dnsrecord_add: Add DNAME record to u'\xe1\xe1' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[144]: dnsrecord_show: Show raw record u'\xe1\xe1' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[145]: dnsrecord_add: Add SRV record to zone u'\u010d.test.' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[146]: dnsrecord_show: Show raw record u'_foo._tcp' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[147]: dnsrecord_show: Show raw record u'_foo._tcp' in zone u'xn--bea.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[148]: dnsrecord_add: Add AFSDB record to u'sk\xfa\u0161ka-c' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[149]: dnsrecord_show: Show raw record u'sk\xfa\u0161ka-c' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[150]: dnsrecord_add: Add A denormalized record in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[151]: dnsrecord_add: Add A record to u'*.test' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[152]: dns_resolve: Resolve name u'a.test.dnszone.test.' (wildcard)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[153]: dns_resolve: Resolve name u'b.test.dnszone.test.' (wildcard)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[154]: dnsrecord_add: Try to add NS record to wildcard owner u'*.test' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[155]: dnsrecord_add: Try to add DNAME record to wildcard owner u'*.test' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[156]: dnsrecord_add: Try to add DS record to wildcard owner u'*.test' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[157]: dnsforwardzone_add: Try to create forward zone u'*.wildcardforwardzone.test.' with wildcard domain name
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[158]: dnsforwardzone_add: Try to create forward zone u'fwzone1.test.' without forwarders with default "(first)" policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[159]: dnsforwardzone_add: Try to create forward u'fwzone1.test.' zone without forwarders with "only" policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[160]: dnsforwardzone_add: Create forward zone u'fwzone1.test.' without forwarders with "none" policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[161]: dnsforwardzone_add: Try to create duplicate forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[162]: dnsforwardzone_del: Delete forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[163]: dnsforwardzone_add: Create forward zone u'fwzone1.test.' with forwarders with default ("first") policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[164]: dnsforwardzone_del: Delete forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[165]: dnsforwardzone_add: Create forward zone u'fwzone1.test.' with forwarders with "only" policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[166]: dnsforwardzone_mod: Modify forward zone u'fwzone1.test.' -- policy "none", no forwarders
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[167]: dnsforwardzone_mod: Try to modify forward zone u'fwzone1.test.' without forwarders with "only" policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[168]: dnsforwardzone_mod: Try to modify forward zone u'fwzone1.test.' without forwarders with "first" policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[169]: dnsforwardzone_mod: Modify forward zone u'fwzone1.test.' -- add forwarders
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[170]: dnsforwardzone_mod: Modify forward zone u'fwzone1.test.' -- policy "only"
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[171]: dnsforwardzone_mod: Modify forward zone u'fwzone1.test.' -- policy "first"
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[172]: dnsforwardzone_find: Search for forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[173]: dnsforwardzone_show: Retrieve forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[174]: dnsforwardzone_add_permission: Try to add per-zone permission for unknown forward zone
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[175]: dnsforwardzone_add_permission: Add per-zone permission for forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[176]: dnsforwardzone_add_permission: Try to add duplicate per-zone permission for forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[177]: permission_show: Make sure the permission was created u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[178]: permission_show: Retrieve the permission u'fwzone1.test.' with --all --raw
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[179]: dnsforwardzone_remove_permission: Try to remove per-zone permission for unknown forward zone
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[180]: dnsforwardzone_remove_permission: Remove per-zone permission for forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[181]: permission_show: Make sure the permission for forward zone u'fwzone1.test.' was deleted
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[182]: dnszone_add: Try to create duplicate zone which is already forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[183]: dnsforwardzone_add: Try to create duplicate forward zone which is already master zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[184]: dnszone_mod: Try to modify forward zone u'fwzone1.test.' using dnszone-mod
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[185]: dnsforwardzone_mod: Try to modify master zone u'dnszone.test' using dnsforwardzone-mod
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[186]: dnszone_del: Try to delete forward zone u'fwzone1.test.' using dnszone-del
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[187]: dnsforwardzone_del: Try to delete master zone u'dnszone.test' using dnsforwardzone-del
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[188]: dnszone_show: Try to retrieve forward zone u'fwzone1.test.' using dnszone-show
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[189]: dnsforwardzone_show: Try to retrieve master zone u'dnszone.test' using dnsforwardzone-show
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[190]: dnszone_add_permission: Try to add per-zone permission for forward zone u'fwzone1.test.' using dnszone-add-permission
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[191]: dnsforwardzone_add_permission: Try to add per-zone permission for master zone u'dnszone.test' using dnsforwardzone-add-permission
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[192]: dnszone_remove_permission: Try to remove per-zone permission for forward zone u'fwzone1.test.' using dnszone-remove-permission
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[193]: dnsforwardzone_remove_permission: Try to remove per-zone permission for master zone u'dnszone.test' using dnsforwardzone-remove-permission
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[194]: dnszone_disable: Try to disable forward zone u'fwzone1.test.' using dnszone-disable
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[195]: dnsforwardzone_disable: Try to disable zone u'dnszone.test' using dnsforwardzone-disable
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[196]: dnszone_enable: Try to enable forward zone u'fwzone1.test.' using dnszone-disable
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[197]: dnsforwardzone_enable: Try to enable zone u'dnszone.test' using dnsforwardzone-disable
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[198]: dnszone_add: Create zone u'master.find.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[199]: dnsforwardzone_add: Create forward zone u'forward.find.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[200]: dnsforwardzone_find: dnsforwardzone-find should return only forward zones
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[201]: dnszone_find: dnszone-find should return only master zones
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[202]: dnsrecord_add: Try to add A record to forward zone u'testdnsres' in zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[203]: dnsrecord_show: Try to retrieve record u'testdnsres' in forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[204]: dnsrecord_del: Try to delete record u'testdnsres' in forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[205]: dnsrecord_mod: Try to modify record in forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[206]: dnsrecord_find: Try to search for all records in forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[207]: dnszone_disable: Disable zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[208]: dnszone_show: Check if zone u'dnszone.test' is really disabled
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[209]: dnszone_enable: Enable zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[210]: dnszone_show: Check if zone u'dnszone.test' is really enabled
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[211]: dnszone_disable: Disable zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[212]: dnszone_show: Check if zone u'\u010d.test.' is really disabled
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[213]: dnszone_enable: Enable zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[214]: dnszone_show: Check if zone u'\u010d.test.' is really enabled
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[215]: dnsforwardzone_disable: Disable forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[216]: dnsforwardzone_show: Check if forward zone u'fwzone1.test.' is really disabled
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[217]: dnsforwardzone_enable: Enable forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[218]: dnsforwardzone_show: Check if forward zone u'fwzone1.test.' is really enabled
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[219]: dnszone_del: Delete zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns post-cleanup[0]: ('dnszone_del', [u'dnszone.test', u'zone2.test', u'zone3.test', u'zone4.test.', u'zone--5.test.', u'31.16.172.in-addr.arpa.', u'30.15.172.in-addr.arpa.', u'70.16.172.in-addr.arpa.', u'128/25.70.16.172.in-addr.arpa.', u'\u010d.test.', u'15.16.172.in-addr.arpa.', u'master.find.test.'], {'continue': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns post-cleanup[1]: ('dnsforwardzone_del', [u'fwzone1.test.', u'forward.find.test.', u'*.wildcardforwardzone.test.'], {'continue': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns post-cleanup[2]: ('dnsconfig_mod', [], {'idnsallowsyncptr': None, 'idnsforwarders': None, 'idnsforwardpolicy': None})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns post-cleanup[3]: ('permission_del', [u'Manage DNS zone dnszone.test.', u'Manage DNS zone \u010d.test.', u'Manage DNS zone fwzone1.test.', u'Manage DNS zone 128/25.70.16.172.in-addr.arpa.'], {'force': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone: Nose class (no docstring)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone-test_generator: test_root_zone pre-cleanup[0]: ('dnszone_del', [u'.'], {'continue': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone-test_generator: test_root_zone pre-cleanup[1]: ('permission_del', [u'Manage DNS zone .'], {'force': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone-test_generator: test_root_zone[0]: dnszone_add: Create zone u'.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone-test_generator: test_root_zone[1]: dnszone_add_permission: Add per-zone permission for zone u'.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone-test_generator: test_root_zone post-cleanup[0]: ('dnszone_del', [u'.'], {'continue': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone-test_generator: test_root_zone post-cleanup[1]: ('permission_del', [u'Manage DNS zone .'], {'force': True})
:: [   PASS   ]   ipa-integration-testing-cleanup: Destroying admin credentials.
:: [   FAIL   ]   /ipa-server/rhel71/ipa-integration-testing/root
Comment 10 Xiyang Dong 2015-01-29 19:16:36 UTC 
Verified on WebUI with ipa-server-4.1.0-15
According to proposal:

    Use existing objectClass 'idnsZone' for master zones (no change).
    Create a new objectClass 'idnsForwardZone'
        mandatory single-value attribute idnsName (for RDN, same as in 'idnsZone')
        mandatory multi-value attribute idnsForwarders (same as in 'idnsZone')
        optional single-value attribute idnsForwardPolicy (same as in 'idnsZone') 

Sanity check on "DNS Forward Zones" subtab page
Comment 11 Xiyang Dong 2015-01-29 19:17:36 UTC 
Created attachment 985724 [details]
DNS Forward Zones page
Comment 13 errata-xmlrpc 2015-03-05 10:12:51 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-0442.html