From 911416e43dd58602df99fa06fe535655d26461ca Mon Sep 17 00:00:00 2001 From: Florence Blanc-Renaud Date: Fri, 31 Aug 2018 10:09:15 +0200 Subject: [PATCH] ipa-server-install: do not perform forwarder validation with --no-dnssec-validation ipa-server-install is checking if the forwarder(s) specified with --forwarder argument support DNSSEC. When the --no-dnssec-validation option is added, the installer should not perform the check. Fixes: https://pagure.io/freeipa/issue/7666 Reviewed-By: Tibor Dudlak --- ipaserver/install/dns.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ipaserver/install/dns.py b/ipaserver/install/dns.py index c7c22176c..9c28d1b06 100644 --- a/ipaserver/install/dns.py +++ b/ipaserver/install/dns.py @@ -292,8 +292,8 @@ def install_check(standalone, api, replica, options, hostname): # test DNSSEC forwarders if options.forwarders: - if (not bindinstance.check_forwarders(options.forwarders) - and not options.no_dnssec_validation): + if not options.no_dnssec_validation \ + and not bindinstance.check_forwarders(options.forwarders): options.no_dnssec_validation = True print("WARNING: DNSSEC validation will be disabled")