Hide Forgot
The --allow-dynupdate option for dnszone-mod does not take any parameter, so if the option is not specified it will be considered as changing it to FALSE, which might not be the intention. This problem affects both CLI and UI. In the following example the dynamic update is initially TRUE (not shown): {{{ # ipa dnszone-show example.com Zone name: example.com Authoritative nameserver: ns.example.com. Administrator e-mail address: root.example.com. SOA serial: 2011311001 SOA refresh: 3600 SOA retry: 900 SOA expire: 1209600 SOA minimum: 3600 Active zone: TRUE }}} The following command intends to change the SOA retry only, but the dynamic update is changed to FALSE. {{{ # ipa dnszone-mod example.com --retry=600 Zone name: example.com Authoritative nameserver: ns.example.com. Administrator e-mail address: root.example.com. SOA serial: 2011311001 SOA refresh: 3600 SOA retry: 600 SOA expire: 1209600 SOA minimum: 3600 Active zone: TRUE Dynamic update: FALSE }}} One solution is to change the --allow-dynupdate option to take a boolean value. Upstream ticket: https://fedorahosted.org/freeipa/ticket/2039
Fixed upstream: master: b5c049ae2e62f24c6dfce618b94f567671e238ea 843c0787b7e123801250b9a0fb5b974cd9fd7e7b Follow-up ticket 2097: master: 2a3a4ae64a9c3fa41520058e24f20f4d3d941e48
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ipa-dns-159: Bug 766075 DNS zone dynamic update is changed to false if --allow-dynupdate not specified :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [08:29:36] :: verifies https://bugzilla.redhat.com/show_bug.cgi?id=766075 Usage: ipa [global-options] dnszone-add NAME [options] ipa: error: no such option: --allow-dynupdate :: [ PASS ] :: Running 'ipa dnszone-add example.com --name-server=qe-blade-08.testrelm.com --admin-email=admin --allow-dynupdate | grep "ipa: error: no such option: --allow-dynupdate"' Zone name: example.com Authoritative nameserver: qe-blade-08.testrelm.com. Administrator e-mail address: admin.example.com. SOA serial: 2012070301 SOA refresh: 3600 SOA retry: 900 SOA expire: 1209600 SOA minimum: 3600 Active zone: TRUE Dynamic update: TRUE Allow query: any; Allow transfer: none; :: [ PASS ] :: Running 'ipa dnszone-add example.com --name-server=qe-blade-08.testrelm.com --admin-email=admin --dynamic-update' :: [ PASS ] :: Running 'ipa dnszone-show example.com | grep "Dynamic update: TRUE"' Dynamic update: TRUE :: [ PASS ] :: Running 'ipa dnszone-show example.com --all | grep "Dynamic update: TRUE"' :: [ PASS ] :: Running 'ipa dnszone-mod example.com --retry=600 | grep "Dynamic update: FALSE"' :: [ PASS ] :: Running 'ipa dnszone-show example.com --all | grep "Dynamic update: FALSE"' Dynamic update: TRUE :: [ PASS ] :: Running 'ipa dnszone-show example.com --all | grep "Dynamic update: TRUE"' Dynamic update: FALSE :: [ PASS ] :: Running 'ipa dnszone-mod example.com --dynamic-update=false | grep "Dynamic update: FALSE"' Zone name: example.com Authoritative nameserver: qe-blade-08.testrelm.com. Administrator e-mail address: admin.example.com. SOA serial: 2012070301 SOA refresh: 3600 SOA retry: 500 SOA expire: 1209600 SOA minimum: 3600 Active zone: TRUE Allow query: any; Allow transfer: none; :: [ PASS ] :: Running 'ipa dnszone-mod example.com --retry=500' Dynamic update: FALSE :: [ PASS ] :: Running 'ipa dnszone-show example.com --all | grep "Dynamic update: FALSE"' :: [ PASS ] :: Running 'ipa dnszone-del example.com' 'ac085d3f-62eb-4ae8-864b-ba6015e9c056' ipa-dns-159 result: PASS Verified: ipa-server-2.2.0-3.el6.x86_64
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: No documentation needed.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2012-0819.html