MAAS didn't parse dnssec-validation automatically
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MAAS |
Fix Released
|
High
|
Andres Rodriguez | ||
2.3 |
Fix Released
|
High
|
Andres Rodriguez |
Bug Description
By default, bind9 installed a config that included 'dnssec-validation auto'. Howeve,r when MAAS went to overwrite this file, it never removed such option and bind9 ended up with a duplicated option:
//
// This file is managed by MAAS. Although MAAS attempts to preserve changes
// made here, it is possible to create conflicts that MAAS can not resolve.
//
// DNS settings available in MAAS (for example, forwarders and
// dnssec-validation) should be managed only in MAAS.
//
// The previous configuration file was backed up at:
// /etc/bind/
//
options { directory "/var/cache/bind";
dnssec-validation auto;
auth-nxdomain no;
listen-on-v6 { any; };
include "/etc/bind/
and:
named.conf.
dnssec-validation auto;
allow-query { any; };
allow-recursion { trusted; };
allow-query-cache { trusted; };
Related branches
- Andres Rodriguez (community): Approve
-
Diff: 155 lines (+46/-36)2 files modifiedsrc/maasserver/management/commands/edit_named_options.py (+43/-33)
src/maasserver/tests/test_commands_edit_named_options.py (+3/-3)
- Newell Jensen (community): Approve
- MAAS Lander: Approve
-
Diff: 177 lines (+79/-15)4 files modifieddebian/control (+14/-14)
debian/maas-region-api.dirs (+1/-0)
debian/maas-region-api.postinst (+46/-1)
debian/maas-region-api.postrm (+18/-0)
- MAAS Lander: Approve
- Mike Pontillo (community): Approve
- MAAS Maintainers: Pending requested
-
Diff: 155 lines (+46/-36)2 files modifiedsrc/maasserver/management/commands/edit_named_options.py (+43/-33)
src/maasserver/tests/test_commands_edit_named_options.py (+3/-3)
Changed in maas: | |
importance: | Undecided → Critical |
milestone: | none → 1.9.0 |
summary: |
- MAAS didn't automatically understand dnssec-validation + MAAS didn't parse dnssec-validation |
summary: |
- MAAS didn't parse dnssec-validation + MAAS didn't parse dnssec-validation automatically |
Changed in maas: | |
milestone: | 1.9.0 → 1.9.1 |
Changed in maas: | |
milestone: | 1.9.1 → none |
Changed in maas: | |
assignee: | nobody → Andres Rodriguez (andreserl) |
importance: | Critical → High |
milestone: | none → 2.4.0beta2 |
milestone: | 2.4.0beta2 → 2.4.0beta1 |
status: | Confirmed → In Progress |
Changed in maas: | |
status: | In Progress → Fix Committed |
Changed in maas: | |
status: | Fix Committed → Fix Released |
Need the contents of the backup file (/etc/bind/ named.conf. options. 2015-11- 05T23:40: 55.108084) in order to triage this.
I'm checking the CI logs to see if I can find anything.