Bug 1845537
| Summary: | IPA bind configuration issue | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | aheverle | ||||||
| Component: | ipa | Assignee: | Thomas Woerner <twoerner> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> | ||||||
| Severity: | low | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 8.2 | CC: | abokovoy, cheimes, ksiddiqu, myusuf, pcech, rcritten, tscherf | ||||||
| Target Milestone: | rc | Keywords: | Triaged | ||||||
| Target Release: | 8.0 | Flags: | pm-rhel:
mirror+
|
||||||
| Hardware: | All | ||||||||
| OS: | Linux | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | ipa-4.8.7-1 | Doc Type: | If docs needed, set a value | ||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2020-11-04 02:51:04 UTC | Type: | Bug | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
This is currently being addressed upstream with https://pagure.io/freeipa/issue/8287 and https://pagure.io/freeipa/issue/8363 It should be fixed in 8.3 once it is released. master: 379b560 Fix named.conf update bug NAMED_DNSSEC_VALIDATION cddd07f Remove named_validate_dnssec update step 996a220 Fix named.conf named_conf_include_re 43dd1e8 More upgrade tests f52a15b Overhaul bind upgrade process ipa-4-8: aa2f932 Fix named.conf update bug NAMED_DNSSEC_VALIDATION 6ddaead More upgrade tests 03abb28 Remove named_validate_dnssec update step 1d3649e Fix named.conf named_conf_include_re b2c3c04 Overhaul bind upgrade process This is already in RHEL 8.3: git tag --contains aa2f932 release-4-8-7 version:
ipa-server-4.8.7-8.module+el8.3.0+7513+a375844a.x86_64
============================= test session starts ==============================
platform linux -- Python 3.6.8, pytest-3.10.1, py-1.9.0, pluggy-0.13.1 -- /usr/libexec/platform-python
cachedir: /home/cloud-user/.pytest_cache
metadata: {'Python': '3.6.8', 'Platform': 'Linux-4.18.0-232.el8.x86_64-x86_64-with-redhat-8.3-Ootpa', 'Packages': {'pytest': '3.10.1', 'py': '1.9.0', 'pluggy': '0.13.1'}, 'Plugins': {'metadata': '1.10.0', 'html': '1.22.1', 'multihost': '3.0', 'sourceorder': '0.5'}}
rootdir: /usr/lib/python3.6/site-packages/ipatests, inifile:
plugins: metadata-1.10.0, html-1.22.1, multihost-3.0, sourceorder-0.5
collecting ... collected 6 items
test_integration/test_upgrade.py::TestUpgrade::test_invoke_upgrader PASSED [ 16%]
test_integration/test_upgrade.py::TestUpgrade::test_double_encoded_cacert PASSED [ 33%]
test_integration/test_upgrade.py::TestUpgrade::test_named_conf_crypto_policy FAILED [ 50%]
test_integration/test_upgrade.py::TestUpgrade::test_current_named_conf PASSED [ 66%]
test_integration/test_upgrade.py::TestUpgrade::test_update_named_conf_simple PASSED [ 83%]
test_integration/test_upgrade.py::TestUpgrade::test_update_named_conf_old PASSED [100%]
[..]
-- Docs: https://docs.pytest.org/en/latest/warnings.html
=============== 1 failed, 5 passed, 6 warnings in 715.40 seconds ===============
test_current_named_conf, test_update_named_conf_simple, test_update_named_conf_old passed.
============================= test session starts ==============================
platform linux -- Python 3.6.8, pytest-3.10.1, py-1.9.0, pluggy-0.13.1 -- /usr/libexec/platform-python
cachedir: /home/cloud-user/.pytest_cache
metadata: {'Python': '3.6.8', 'Platform': 'Linux-4.18.0-232.el8.x86_64-x86_64-with-redhat-8.3-Ootpa', 'Packages': {'pytest': '3.10.1', 'py': '1.9.0', 'pluggy': '0.13.1'}, 'Plugins': {'metadata': '1.10.0', 'html': '1.22.1', 'multihost': '3.0', 'sourceorder': '0.5'}}
rootdir: /usr/lib/python3.6/site-packages/ipatests, inifile:
plugins: metadata-1.10.0, html-1.22.1, multihost-3.0, sourceorder-0.5
collecting ... collected 3 items
test_integration/test_installation.py::TestInstallMasterDNS::test_install_master PASSED [ 33%]
test_integration/test_installation.py::TestInstallMasterDNS::test_server_install_lock_bind_recursion PASSED [ 66%]
test_integration/test_installation.py::TestInstallMasterDNS::test_install_kra PASSED [100%]
---------------- generated xml file: /home/cloud-user/junit.xml ----------------
----------- generated html file: file:///home/cloud-user/report.html -----------
========================== 3 passed in 733.24 seconds ==========================
Automation passed. Hence marking the bug as verified.
Created attachment 1711153 [details]
upgrade-test-result.txt
Created attachment 1711154 [details]
installation-test-result.txt
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2020:4670 |
Description of problem: When configuring DNS forwarding in bind service bundled with RHEL 8.2 IDM (free IPA), the file "/etc/named/ipa-ext.conf" cannot be customised, because it contains an options {} list that overlap with the one found in the file "/etc/named.conf". Hence the workaround I used was to configure all "options" modifications in the file "/etc/named.conf" (and comment the inclusion of "/etc/named/ipa-ext.conf"). The issue is it won't be resilient across updates. I think this should be fixed or at least better documented. Version-Release number of selected component (if applicable): ipa 4.8.4