Bug 1114013 – [RFE] Separate master and forward DNS zones

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1114013 - [RFE] Separate master and forward DNS zones

Summary:	[RFE] Separate master and forward DNS zones

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 7
Classification:	Red Hat
Component:	ipa (Show other bugs)
Sub Component:
Version:	7.0
Hardware:	Unspecified Unspecified

Priority	medium Severity unspecified
Target Milestone:	rc
Target Release:	---
Assigned To:	Martin Kosek
QA Contact:	Namita Soman
Docs Contact:

URL:
Whiteboard:
Keywords:	FutureFeature

Depends On:	1168131 1175384
Blocks:
	Show dependency tree / graph

Reported:	2014-06-27 09:02 EDT by Martin Kosek
Modified:	2015-03-05 05:12 EST (History)
CC List:	4 users (show)

See Also:
Fixed In Version:	ipa-4.1.0-7.el7
Doc Type:	Enhancement
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2015-03-05 05:12:51 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
DNS Forward Zones page (207.34 KB, image/png) 2015-01-29 14:17 EST, Xiyang Dong	no flags	Details
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2015:0442	normal	SHIPPED_LIVE	Moderate: ipa security, bug fix, and enhancement update	2015-03-05 09:50:39 EST

Groups: None (edit)

Description Martin Kosek 2014-06-27 09:02:06 EDT

This bug is created as a clone of upstream ticket:
https://fedorahosted.org/freeipa/ticket/3210

Now we are mixing zone types 'master' and 'forward' in the single thing (in IPA UI and in objectClass 'idnsZone').

Zone types recognized in BIND:
http://www.zytrax.com/books/dns/ch7/zone.html#type

Current situation leads to confusion for users because:
* Behaviour is not well defined (in BIND it is possible to set forwarders for 'master' zones with different effect than for 'forward' zones)
* BIND documentation is not applicable
* Users are forced to create imaginary SOA record (which is never seen by client) even for 'forward' zones
* It is possible to create subordinate records in 'forward' zone but these records are ignored

Proposal:
* Use existing objectClass 'idnsZone' for master zones (no change).
* Create a new objectClass 'idnsForwardZone'
  * mandatory single-value attribute idnsName (for RDN, same as in 'idnsZone')
  * mandatory multi-value attribute idnsForwarders (same as in 'idnsZone')
  * optional single-value attribute idnsForwardPolicy (same as in 'idnsZone')

Comment 1 Martin Kosek 2014-06-27 09:11:00 EDT

DNS forward zones are now supported upstream:

49068ade92b3fa4874b3107923bbd5b84e1a04f3 Separate master and forward DNS zones
266015c3e28c04894cd3a52ea2f99c25eef2c6a9 Prevent commands to modify different type of a zone
727f5f33732df252fa99d5c168d6727589ee6076 Create BASE zone class
11c250a6125da300f85880e090e5db1659078daa Tests DNS: forward zones

Old master zones with forward are converted to DNS forward zones on when the first IPA server is upgraded to 4.0:

master:

c1f3fd6831c47a2672f37e12db149be1b1122d75 Added upgrade step executed before schmema is upgraded
aa2ef07b8c74d05e8a83928dab4b5cae8722a52f Upgrade special master zones to forward zones

We plan to release warnings when DNS master zones with a forwarder are being created in IPA 4.0 server as there is a change in behavior.

Comment 2 Petr Viktorin 2014-07-09 04:55:13 EDT

Fixed upstream:
master: https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=49068ade92b3fa4874b3107923bbd5b84e1a04f3

and related patches (see https://fedorahosted.org/freeipa/ticket/3210)

Comment 3 Martin Kosek 2014-07-18 06:03:48 EDT

Related upstream information for the feature:

http://www.freeipa.org/page/Releases/4.0.0#DNS_Master_and_Forward_Zones

Comment 5 Martin Kosek 2014-11-19 12:07:38 EST

Linking with

https://fedorahosted.org/freeipa/ticket/4647

which fixes the error message.

Comment 6 Martin Kosek 2014-11-19 12:08:18 EST

Fixed upstream:

master:
310e46452c41223afa0b1b318c503574567df105 Fix warning message should not contain CLI commands

ipa-4-1:
38130c632bda27711407f5c74f26031da5b52ad6 Fix warning message should not contain CLI commands

Comment 7 Martin Kosek 2014-12-18 03:15:41 EST

Please be aware of new bug related to migration from RHEL-6.x to RHEL-7.1 directly - Bug 1175384.

Comment 8 Scott Poore 2015-01-29 10:35:13 EST

Verified CLI operability using upstream test suite results against RHEL7.1 build with IPA version listed below.

Version ::

ipa-server-4.1.0-15.el7.x86_64


Results ::

Note, failures below are due to different version of server and test package.  These can be ignored.

+-----------------------------------------------------------------------------------------+
     Test:[/ipa-server/rhel71/ipa-integration-testing/root]: [ Pass(237/240): 98% ] 
 +-----------------------------------------------------------------------------------------+
:: [   PASS   ]   ipa-integration-testing-startup: installing ipa-tests and other required packages
:: [   FAIL   ]   ipa-integration-testing-master: test_xmlrpc_dns_plugin_py
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns: Nose class (no docstring)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns pre-cleanup[0]: ('dnszone_del', [u'dnszone.test', u'zone2.test', u'zone3.test', u'zone4.test.', u'zone--5.test.', u'31.16.172.in-addr.arpa.', u'30.15.172.in-addr.arpa.', u'70.16.172.in-addr.arpa.', u'128/25.70.16.172.in-addr.arpa.', u'\u010d.test.', u'15.16.172.in-addr.arpa.', u'master.find.test.'], {'continue': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns pre-cleanup[1]: ('dnsforwardzone_del', [u'fwzone1.test.', u'forward.find.test.', u'*.wildcardforwardzone.test.'], {'continue': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns pre-cleanup[2]: ('dnsconfig_mod', [], {'idnsallowsyncptr': None, 'idnsforwarders': None, 'idnsforwardpolicy': None})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns pre-cleanup[3]: ('permission_del', [u'Manage DNS zone dnszone.test.', u'Manage DNS zone \u010d.test.', u'Manage DNS zone fwzone1.test.', u'Manage DNS zone 128/25.70.16.172.in-addr.arpa.'], {'force': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[0]: dnszone_show: Try to retrieve non-existent zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[1]: dnszone_show: Try to retrieve non-existent IDN zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[2]: dnszone_mod: Try to update non-existent zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[3]: dnszone_del: Try to delete non-existent zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[4]: dnszone_add: Create zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[5]: dnszone_add: Try to create duplicate zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[6]: dnszone_add: Try to create a zone with nonexistent NS entry
:: [   FAIL   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[7]: dnszone_add: Create a zone with nonexistent NS entry with --force
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[8]: dnszone_mod: Try to remove value of "idnssomrname" attribute using dnszone-mod --name-server=
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[9]: dnszone_add: Create a zone with upper case name
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[10]: dnszone_add: Create a zone with consecutive dash characters
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[11]: dnszone_show: Retrieve zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[12]: dnszone_mod: Update zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[13]: dnszone_mod: Try to add invalid NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[14]: dnszone_mod: Try to add invalid NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[15]: dnszone_mod: Try to add invalid NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[16]: dnszone_mod: Try to add invalid NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[17]: dnszone_mod: Try to add invalid NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[18]: dnszone_mod: Try to add invalid NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[19]: dnszone_mod: Add NSEC3PARAM record to zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[20]: dnszone_mod: Delete NSEC3PARAM record from zone dnszone.test
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[21]: dnszone_add: Try to create reverse zone u'31.16.172.in-addr.arpa.' with NS record in it
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[22]: dnszone_add: Create reverse zone u'31.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[23]: dnszone_find: Search for zones with admin email u'root.dnszone.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[24]: dnszone_find: Search for zones with admin email u'root.dnszone.test.' with --forward-only
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[25]: dnszone_del: Delete reverse zone u'31.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[26]: dnsrecord_show: Try to retrieve non-existent record u'testdnsres' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[27]: dnsrecord_del: Try to delete non-existent record u'testdnsres' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[28]: dnsrecord_del: Try to delete root zone record '@' in u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[29]: dnsrecord_add: Create record u'dnszone.test' in zone u'testdnsres'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[30]: dnsrecord_find: Search for all records in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[31]: dnsrecord_add: Add A record to u'testdnsres' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[32]: dnsrecord_del: Remove A record from u'testdnsres' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[33]: dnsrecord_mod: Add AAAA record to u'testdnsres' in zone u'dnszone.test' using dnsrecord_mod
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[34]: dnsrecord_mod: Try to modify nonexistent record in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[35]: dnsrecord_mod: Modify AAAA record in u'testdnsres' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[36]: dnsrecord_mod: Remove AAAA record from u'testdnsres' in zone u'dnszone.test' using dnsrecord_mod
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[37]: dnsrecord_add: Try to add invalid MX record to zone u'dnszone.test' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[38]: dnsrecord_add: Add MX record to zone u'dnszone.test' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[39]: dnsrecord_add: Try to add invalid SRV record to zone u'dnszone.test' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[40]: dnsrecord_add: Try to add SRV record to zone u'dnszone.test' both via parts and a raw value
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[41]: dnsrecord_add: Add SRV record to zone u'dnszone.test' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[42]: dnsrecord_mod: Try to modify SRV record in zone u'dnszone.test' without specifying modified value
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[43]: dnsrecord_mod: Try to modify SRV record in zone u'dnszone.test' with non-existent modified value
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[44]: dnsrecord_mod: Try to modify SRV record in zone u'dnszone.test' with invalid part value
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[45]: dnsrecord_mod: Modify SRV record in zone u'dnszone.test' using parts
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[46]: dnsrecord_add: Try to add invalid LOC record to zone u'dnszone.test' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[47]: dnsrecord_add: Add LOC record to zone u'dnszone.test' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[48]: dnsrecord_add: Try to add CNAME record to u'testdnsres' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[49]: dnsrecord_add: Try to add multiple CNAME record u'testcnamerec' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[50]: dnsrecord_add: Add CNAME record to u'testcnamerec' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[51]: dnsrecord_add: Try to add other record to CNAME record u'testcnamerec' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[52]: dnsrecord_mod: Try to add other record to CNAME record u'testcnamerec' using dnsrecord_mod
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[53]: dnsrecord_mod: Add A record and delete CNAME record in u'testcnamerec' with dnsrecord_mod
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[54]: dnsrecord_add: Try to add multiple DNAME records to u'testdns-dname' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[55]: dnsrecord_add: Add DNAME record to u'testdns-dname' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[56]: dnsrecord_add: Try to add CNAME record to u'testdns-dname' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[57]: dnsrecord_add: Try to add NS record to u'testdns-dname' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[58]: dnsrecord_add: Add NS+DNAME record to u'zone2.test' zone record using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[59]: dnszone_del: Delete zone u'zone2.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[60]: dnsrecord_add: Try to add invalid KX record u'testdnsres' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[61]: dnsrecord_add: Add KX record to u'testdnsres' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[62]: dnsrecord_add: Add TXT record to u'testdnsres' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[63]: dnsrecord_add: Try to add unresolvable absolute NS record to u'testdnsres-ns' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[64]: dnsrecord_add: Try to add unresolvable relative NS record to u'testdnsres-ns' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[65]: dnsrecord_add: Add unresolvable NS record with --force to u'testdnsres-ns' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[66]: dnsrecord_mod: Try to to rename DNS zone u'dnszone.test' root record
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[67]: dnsrecord_mod: Rename DNS record u'testdnsres-ns' to u'testdnsres-ns-renamed'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[68]: dnsrecord_del: Delete record u'testdnsres' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[69]: dnsrecord_add: Add DLV record to u'dlv' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[70]: dnsrecord_add: Try to add DS record to zone u'dnszone.test' apex, using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[71]: dnsrecord_add: Try to add DS record u'ds' without NS record in RRset, using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[72]: dnsrecord_add: Add NS record to u'ds' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[73]: dnsrecord_add: Add DS record to u'ds' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[74]: dnsrecord_del: Try to delete NS record (with DS record) u'ds' using dnsrecord_del
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[75]: dnsrecord_del: Delete NS+DS record u'ds' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[76]: dnsrecord_del: Delete record u'dlv' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[77]: dnsrecord_add: Try to add invalid TLSA record to u'tlsa' using dnsrecord_add (1)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[78]: dnsrecord_add: Try to add invalid TLSA record to u'tlsa' using dnsrecord_add (2)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[79]: dnsrecord_add: Try to add invalid TLSA record to u'tlsa' using dnsrecord_add (3)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[80]: dnsrecord_add: Add TLSA record to u'tlsa' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[81]: dnsrecord_mod: Remove record using dnsrecord-mod u'tlsa' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[82]: dnszone_add: Try to create a reverse zone from invalid IP
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[83]: dnszone_add: Create reverse zone from IP/netmask u'172.16.31.0' using name_from_ip option
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[84]: dnszone_add: Create reverse zone from IP u'172.15.30.0/24' using name_from_ip option
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[85]: dnsrecord_add: Add PTR record u'80' to u'31.16.172.in-addr.arpa.' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[86]: dnsrecord_show: Show record u'80' in zone u'31.16.172.in-addr.arpa.' with --structured and --all options
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[87]: dnsconfig_mod: Update global DNS settings
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[88]: dnszone_mod: Try to add invalid allow-query to zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[89]: dnszone_mod: Add allow-query ACL to zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[90]: dnszone_mod: Try to add invalid allow-transfer to zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[91]: dnszone_mod: Add allow-transer ACL to zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[92]: dnszone_mod: Set SOA serial of zone u'dnszone.test' to high number
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[93]: dnsrecord_add: Try to create duplicate PTR record for u'testdnsres' with --a-create-reverse
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[94]: dnsrecord_add: Create A record u'testdnsres' in zone u'dnszone.test' with --a-create-reverse
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[95]: dnsrecord_show: Check reverse record for u'testdnsres' created via --a-create-reverse
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[96]: dnszone_add_permission: Try to add per-zone permission for unknown zone
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[97]: dnszone_add_permission: Add per-zone permission for zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[98]: dnszone_add_permission: Try to add duplicate per-zone permission for zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[99]: permission_show: Make sure the permission was created u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[100]: permission_show: Retrieve the permission u'dnszone.test' with --all --raw
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[101]: dnszone_remove_permission: Try to remove per-zone permission for unknown zone
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[102]: dnszone_remove_permission: Remove per-zone permission for zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[103]: permission_show: Make sure the permission for zone u'dnszone.test' was deleted
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[104]: dnszone_remove_permission: Try to remove non-existent per-zone permission for zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[105]: dnszone_add: Try to create zone u'zone3.test' with relative nameserver
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[106]: dnszone_add: Try to create zone u'zone3.test' with nameserver in the zone itself
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[107]: dnszone_add: Create zone u'zone3.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[108]: dnsrecord_add: Add A record to u'ns2' in zone u'zone3.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[109]: dnszone_add: Create reverse zone u'70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[110]: dnszone_add: Create classless reverse zone u'128/25.70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[111]: dnszone_add_permission: Add per-zone permission for classless zone u'128/25.70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[112]: dnszone_remove_permission: Remove per-zone permission for classless zone u'128/25.70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[113]: dnsrecord_add: Add NS record to u'128/28' in revzone u'70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[114]: dnsrecord_add: Add CNAME record to u'129' in revzone u'70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[115]: dnsrecord_add: Add PTR record to u'129' in revzone u'128/25.70.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[116]: dnszone_add: Create IDN zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[117]: dnszone_show: Retrieve zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[118]: dnszone_show: Retrieve zone raw u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[119]: dnszone_find: Find zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[120]: dnszone_find: Find zone u'xn--bea.test.' raw
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[121]: dnszone_mod: Update zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[122]: dnszone_add: Create reverse zone u'15.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[123]: dnszone_del: Delete reverse zone u'15.16.172.in-addr.arpa.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[124]: dnszone_find: Search for zones with name u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[125]: dnsrecord_show: Try to retrieve non-existent record u'sk\xfa\u0161ka' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[126]: dnsrecord_add: Create record u'\u010d.test.' in zone u'sk\xfa\u0161ka'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[127]: dnsrecord_find: Search for all records in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[128]: dnsrecord_find: Search for all records in zone u'\u010d.test.' with --pkey-only
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[129]: dnsrecord_find: Find u'\u010d.test.' record in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[130]: dnsrecord_find: Find u'sk\xfa\u0161ka' record in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[131]: dnsrecord_find: Find u'sk\xfa\u0161ka' record in zone u'\u010d.test.' with --pkey-only
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[132]: dnsrecord_find: Find raw u'sk\xfa\u0161ka' record in zone u'\u010d.test.' with --pkey-only
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[133]: dnsrecord_find: Find raw u'xn--skka-rra23d' record in zone u'\u010d.test.' with --pkey-only
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[134]: dnsrecord_add: Add A record to u'sk\xfa\u0161ka' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[135]: dnsrecord_del: Remove A record from u'sk\xfa\u0161ka' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[136]: dnsrecord_add: Add MX record to zone u'\u010d.test.' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[137]: dnsrecord_add: Add MX record (2) to zone u'\u010d.test.' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[138]: dnsrecord_del: Remove MX record (2) from zone u'\u010d.test.' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[139]: dnsrecord_add: Add KX record to zone u'\u010d.test.' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[140]: dnsrecord_show: Retrieve raw zone record of zone u'\u010d.test.' using dnsrecord_show
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[141]: dnsrecord_add: Add CNAME record to u'\u0161\u0161' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[142]: dnsrecord_show: Show raw record u'\u0161\u0161' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[143]: dnsrecord_add: Add DNAME record to u'\xe1\xe1' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[144]: dnsrecord_show: Show raw record u'\xe1\xe1' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[145]: dnsrecord_add: Add SRV record to zone u'\u010d.test.' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[146]: dnsrecord_show: Show raw record u'_foo._tcp' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[147]: dnsrecord_show: Show raw record u'_foo._tcp' in zone u'xn--bea.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[148]: dnsrecord_add: Add AFSDB record to u'sk\xfa\u0161ka-c' using dnsrecord_add
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[149]: dnsrecord_show: Show raw record u'sk\xfa\u0161ka-c' in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[150]: dnsrecord_add: Add A denormalized record in zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[151]: dnsrecord_add: Add A record to u'*.test' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[152]: dns_resolve: Resolve name u'a.test.dnszone.test.' (wildcard)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[153]: dns_resolve: Resolve name u'b.test.dnszone.test.' (wildcard)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[154]: dnsrecord_add: Try to add NS record to wildcard owner u'*.test' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[155]: dnsrecord_add: Try to add DNAME record to wildcard owner u'*.test' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[156]: dnsrecord_add: Try to add DS record to wildcard owner u'*.test' in zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[157]: dnsforwardzone_add: Try to create forward zone u'*.wildcardforwardzone.test.' with wildcard domain name
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[158]: dnsforwardzone_add: Try to create forward zone u'fwzone1.test.' without forwarders with default "(first)" policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[159]: dnsforwardzone_add: Try to create forward u'fwzone1.test.' zone without forwarders with "only" policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[160]: dnsforwardzone_add: Create forward zone u'fwzone1.test.' without forwarders with "none" policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[161]: dnsforwardzone_add: Try to create duplicate forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[162]: dnsforwardzone_del: Delete forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[163]: dnsforwardzone_add: Create forward zone u'fwzone1.test.' with forwarders with default ("first") policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[164]: dnsforwardzone_del: Delete forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[165]: dnsforwardzone_add: Create forward zone u'fwzone1.test.' with forwarders with "only" policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[166]: dnsforwardzone_mod: Modify forward zone u'fwzone1.test.' -- policy "none", no forwarders
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[167]: dnsforwardzone_mod: Try to modify forward zone u'fwzone1.test.' without forwarders with "only" policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[168]: dnsforwardzone_mod: Try to modify forward zone u'fwzone1.test.' without forwarders with "first" policy
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[169]: dnsforwardzone_mod: Modify forward zone u'fwzone1.test.' -- add forwarders
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[170]: dnsforwardzone_mod: Modify forward zone u'fwzone1.test.' -- policy "only"
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[171]: dnsforwardzone_mod: Modify forward zone u'fwzone1.test.' -- policy "first"
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[172]: dnsforwardzone_find: Search for forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[173]: dnsforwardzone_show: Retrieve forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[174]: dnsforwardzone_add_permission: Try to add per-zone permission for unknown forward zone
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[175]: dnsforwardzone_add_permission: Add per-zone permission for forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[176]: dnsforwardzone_add_permission: Try to add duplicate per-zone permission for forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[177]: permission_show: Make sure the permission was created u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[178]: permission_show: Retrieve the permission u'fwzone1.test.' with --all --raw
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[179]: dnsforwardzone_remove_permission: Try to remove per-zone permission for unknown forward zone
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[180]: dnsforwardzone_remove_permission: Remove per-zone permission for forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[181]: permission_show: Make sure the permission for forward zone u'fwzone1.test.' was deleted
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[182]: dnszone_add: Try to create duplicate zone which is already forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[183]: dnsforwardzone_add: Try to create duplicate forward zone which is already master zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[184]: dnszone_mod: Try to modify forward zone u'fwzone1.test.' using dnszone-mod
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[185]: dnsforwardzone_mod: Try to modify master zone u'dnszone.test' using dnsforwardzone-mod
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[186]: dnszone_del: Try to delete forward zone u'fwzone1.test.' using dnszone-del
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[187]: dnsforwardzone_del: Try to delete master zone u'dnszone.test' using dnsforwardzone-del
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[188]: dnszone_show: Try to retrieve forward zone u'fwzone1.test.' using dnszone-show
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[189]: dnsforwardzone_show: Try to retrieve master zone u'dnszone.test' using dnsforwardzone-show
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[190]: dnszone_add_permission: Try to add per-zone permission for forward zone u'fwzone1.test.' using dnszone-add-permission
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[191]: dnsforwardzone_add_permission: Try to add per-zone permission for master zone u'dnszone.test' using dnsforwardzone-add-permission
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[192]: dnszone_remove_permission: Try to remove per-zone permission for forward zone u'fwzone1.test.' using dnszone-remove-permission
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[193]: dnsforwardzone_remove_permission: Try to remove per-zone permission for master zone u'dnszone.test' using dnsforwardzone-remove-permission
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[194]: dnszone_disable: Try to disable forward zone u'fwzone1.test.' using dnszone-disable
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[195]: dnsforwardzone_disable: Try to disable zone u'dnszone.test' using dnsforwardzone-disable
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[196]: dnszone_enable: Try to enable forward zone u'fwzone1.test.' using dnszone-disable
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[197]: dnsforwardzone_enable: Try to enable zone u'dnszone.test' using dnsforwardzone-disable
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[198]: dnszone_add: Create zone u'master.find.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[199]: dnsforwardzone_add: Create forward zone u'forward.find.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[200]: dnsforwardzone_find: dnsforwardzone-find should return only forward zones
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[201]: dnszone_find: dnszone-find should return only master zones
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[202]: dnsrecord_add: Try to add A record to forward zone u'testdnsres' in zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[203]: dnsrecord_show: Try to retrieve record u'testdnsres' in forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[204]: dnsrecord_del: Try to delete record u'testdnsres' in forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[205]: dnsrecord_mod: Try to modify record in forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[206]: dnsrecord_find: Try to search for all records in forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[207]: dnszone_disable: Disable zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[208]: dnszone_show: Check if zone u'dnszone.test' is really disabled
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[209]: dnszone_enable: Enable zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[210]: dnszone_show: Check if zone u'dnszone.test' is really enabled
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[211]: dnszone_disable: Disable zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[212]: dnszone_show: Check if zone u'\u010d.test.' is really disabled
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[213]: dnszone_enable: Enable zone u'\u010d.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[214]: dnszone_show: Check if zone u'\u010d.test.' is really enabled
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[215]: dnsforwardzone_disable: Disable forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[216]: dnsforwardzone_show: Check if forward zone u'fwzone1.test.' is really disabled
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[217]: dnsforwardzone_enable: Enable forward zone u'fwzone1.test.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[218]: dnsforwardzone_show: Check if forward zone u'fwzone1.test.' is really enabled
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns[219]: dnszone_del: Delete zone u'dnszone.test'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns post-cleanup[0]: ('dnszone_del', [u'dnszone.test', u'zone2.test', u'zone3.test', u'zone4.test.', u'zone--5.test.', u'31.16.172.in-addr.arpa.', u'30.15.172.in-addr.arpa.', u'70.16.172.in-addr.arpa.', u'128/25.70.16.172.in-addr.arpa.', u'\u010d.test.', u'15.16.172.in-addr.arpa.', u'master.find.test.'], {'continue': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns post-cleanup[1]: ('dnsforwardzone_del', [u'fwzone1.test.', u'forward.find.test.', u'*.wildcardforwardzone.test.'], {'continue': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns post-cleanup[2]: ('dnsconfig_mod', [], {'idnsallowsyncptr': None, 'idnsforwarders': None, 'idnsforwardpolicy': None})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_dns-test_generator: test_dns post-cleanup[3]: ('permission_del', [u'Manage DNS zone dnszone.test.', u'Manage DNS zone \u010d.test.', u'Manage DNS zone fwzone1.test.', u'Manage DNS zone 128/25.70.16.172.in-addr.arpa.'], {'force': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone: Nose class (no docstring)
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone-test_generator: test_root_zone pre-cleanup[0]: ('dnszone_del', [u'.'], {'continue': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone-test_generator: test_root_zone pre-cleanup[1]: ('permission_del', [u'Manage DNS zone .'], {'force': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone-test_generator: test_root_zone[0]: dnszone_add: Create zone u'.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone-test_generator: test_root_zone[1]: dnszone_add_permission: Add per-zone permission for zone u'.'
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone-test_generator: test_root_zone post-cleanup[0]: ('dnszone_del', [u'.'], {'continue': True})
:: [   PASS   ]   ipatests-test_xmlrpc-test_dns_plugin-test_root_zone-test_generator: test_root_zone post-cleanup[1]: ('permission_del', [u'Manage DNS zone .'], {'force': True})
:: [   PASS   ]   ipa-integration-testing-cleanup: Destroying admin credentials.
:: [   FAIL   ]   /ipa-server/rhel71/ipa-integration-testing/root

Comment 10 Xiyang Dong 2015-01-29 14:16:36 EST

Verified on WebUI with ipa-server-4.1.0-15
According to proposal:

    Use existing objectClass 'idnsZone' for master zones (no change).
    Create a new objectClass 'idnsForwardZone'
        mandatory single-value attribute idnsName (for RDN, same as in 'idnsZone')
        mandatory multi-value attribute idnsForwarders (same as in 'idnsZone')
        optional single-value attribute idnsForwardPolicy (same as in 'idnsZone') 

Sanity check on "DNS Forward Zones" subtab page

Comment 11 Xiyang Dong 2015-01-29 14:17:36 EST

Created attachment 985724 [details]
DNS Forward Zones page

Comment 13 errata-xmlrpc 2015-03-05 05:12:51 EST

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-0442.html

Note You need to log in before you can comment on or make changes to this bug.