freeipa

0 Fork 0

Files

T

Christian Heimes 731c5b2110 Lookup ipa-ca record with NSS

DNS data management now uses NSS's getaddrinfo() instead of direct DNS
queries to resolve the ipa-ca record. This fixes missing ipa-ca records
when the current hostname is not resolvable in DNS but has correct
records in /etc/hosts.

Reduce timeout to 15 seconds and tighten timeout loop.

The changeset can speed up installation by almost 60 seconds.
ipa-server-install without built-in DNS calls into DNS data management
twice with a timeout of 30 seconds for each call.

Fixes: https://pagure.io/freeipa/issue/8529
Related: https://pagure.io/freeipa/issue/8521
Related: https://pagure.io/freeipa/issue/8501
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2020-10-10 12:54:06 +02:00

advise

ipa-advise: fallback to /usr/libexec/platform-python if python3 not found

2020-05-05 11:50:01 +02:00

dnssec

named: Allow using of a custom OpenSSL engine for BIND

2020-08-31 09:42:31 +03:00

install

Lookup ipa-ca record with NSS

2020-10-10 12:54:06 +02:00

plugins

Delay import of psutil to avoid AVC