freeipa

#8214 Support for opendnssec 2.1.6
Closed: fixed by frenaud. Opened by frenaud.

Closed: fixed
Reopen Issue

Issue

On rawhide, the command ipa-dns-install --dnssec-master fails with an error because the command /usr/bin/ods-ksmutil could not be found:

DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd37:transport.py:557 Done configuring IPA OpenDNSSEC exporter daemon (ipa-ods-exporter).
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd37:transport.py:557 Configuring OpenDNSSEC enforcer daemon (ods-enforcerd)
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd37:transport.py:557   [1/8]: checking status
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd37:transport.py:557   [2/8]: setting up configuration files
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd37:transport.py:557   [3/8]: setting up ownership and file mode bits
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd37:transport.py:557   [4/8]: generating master key
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd37:transport.py:557   [5/8]: setting up OpenDNSSEC
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd37:transport.py:557   [error] FileNotFoundError: [Errno 2] No such file or directory: '/usr/bin/ods-ksmutil'
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd37:transport.py:557 [Errno 2] No such file or directory: '/usr/bin/ods-ksmutil'
DEBUG    ipatests.pytest_ipa.integration.host.Host.master.cmd37:transport.py:217 Exit code: 1

Fedora rawhide is shipping opendnssec 2.1.6 that removed this command.

Steps to Reproduce

  1. Install freeipa-server and freeipa-server-dns packages on rawhide. Check that opendnssec 2.1.6 is installed
  2. Install ipa server without dns
  3. install the DNS component with ipa-dns-install --dnssec-master

Actual behavior

ipa-dns-install fails with [error] FileNotFoundError: [Errno 2] No such file or directory: '/usr/bin/ods-ksmutil'

Expected behavior

ipa-dns-install should succeed

Version/Release/Distribution

freeipa-server-4.9.0.dev-0.fc33.x86_64
opendnssec-2.1.6-2.fc33.x86_64

Additional info:

Issue was detected during the nightly test on rawhide: PR 148

Metadata Update from @frenaud:
- Issue assigned to frenaud

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4295

master:

  • 7ae1352c72b81d656ec3d6ee44ad2b405298e58f Support opendnssec 2.1.6
  • c2e355ae59b8ecb862838eeeb37a33370a4874a4 Remove the from opendnssec conf
  • b857828180c650d7b2db17663a9413323eaef73d With opendnssec 2, read the zone list from file
  • 8080bf7b359ca87d62502acf1fbdf235376007f7 Support OpenDNSSEC 2.1: new ods-signer protocol
  • b6865831c97bbab71c02ec12dea2280caa505c6d DnsSecMaster migration: move the call to zonelist export later
  • 682b59c8e801f06b3c6e4aa97c1ab33390c9edf8 opendnssec2.1 support: move all ods tasks to specific file

ipa-4-8:

  • 23993f58e1da98e537b03b9274d91308cbc63a6c Support opendnssec 2.1.6
  • 5716c3b78f43391d2ab7b4b1fd672135f3b55bdb Remove the from opendnssec conf
  • 6cb3b11a61d5b9b7df93130188c7feef83398090 With opendnssec 2, read the zone list from file
  • fc4ccfa5c3a7ecd7c9e5539595e0440965d62336 Support OpenDNSSEC 2.1: new ods-signer protocol
  • 598c55cc0dc884aa780ac2dc2f3adfd8299e6ea0 DnsSecMaster migration: move the call to zonelist export later
  • 799ebc8be681165e622778848a9b2989434a29dd opendnssec2.1 support: move all ods tasks to specific file

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.