freeipa

#9151 Disable DNSSEC in ipa-healthcheck tests
Closed: fixed by rcritten. Opened by rcritten.

Closed: fixed
Reopen Issue

Issue

ipa-healthcheck is an optional package that is not installed unless needed by a test. The packages are installed (and removed) while the IPA server is installed.

If the DNS forwarder that IPA is using doesn't support DNSSEC and DNSSEC is enabled in IPA (the default) then the ipa-healthcheck installation will fail and cause the entire test suite to fail.

So don't rely on luck to get a working forwarder, disable DNSSEC only for the ipa-healthcheck tests so we can ensure the package is installable.

master:

  • 92d8077304ad0847c42eca3d11c79d9e22a46335 ipatests: Adding --no-dnssec-validation option for healthcheck

ipa-4-9:

  • f11b7b3bf50f7ccf4689b1b0f80894b0b1247983 ipatests: Adding --no-dnssec-validation option for healthcheck

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2012911
Metadata
None
None
None
None
Low
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.