#5851 DNS upgrade is broken: master zones are not transformed to forward zones properly
Closed: Fixed None Opened 7 years ago by pspacek.

This happens when upgrading from old IPA versions to 4.3+.

DNS caching might cause false positive in code which replaces master zone with forward zone. This will effectivelly delete the master zone without adding a replacement zone.

Solution is to use skip_overlap_check option for dnsforwardzone_add command.

  [7/10]: upgrading server
Zones with specified forwarders with policy different than none will be transformed to forward zones.
Original zones will be saved in LDIF format in /var/lib/ipa/backup/dns-forward-zones-backup-2016-04-26-19-55-44.ldif file
Checking DNS domain test., please wait ...
Transform to forwardzone terminated: creating forwardzone test. failed
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/ipaserver/install/plugins/dns.py", line 344, in execute
    self.api.Command['dnsforwardzone_add'](zone['idnsname'][0], **kw)
  File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 434, in __call__
    return self.__do_call(*args, **options)
  File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 460, in __do_call
    ret = self.run(*args, **options)
  File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 777, in run
    return self.execute(*args, **options)
  File "/usr/lib/python2.7/site-packages/ipalib/plugins/dns.py", line 4564, in execute
    result = super(dnsforwardzone_add, self).execute(*keys, **options)
  File "/usr/lib/python2.7/site-packages/ipalib/plugins/baseldap.py", line 1230, in execute
    *keys, **options)
  File "/usr/lib/python2.7/site-packages/ipalib/plugins/dns.py", line 4551, in pre_callback
    entry_attrs, attrs_list, *keys, **options)
  File "/usr/lib/python2.7/site-packages/ipalib/plugins/dns.py", line 2161, in pre_callback
    raise errors.InvocationError(e.message)
InvocationError: DNS zone test. already exists in DNS and is handled by server(s): vm-033.abc.idm.lab.eng.brq.redhat.com.

master:

  • 475547f DNS: Fix upgrade - master to forward zone transformation

ipa-4-3:

  • 4a270fc DNS: Fix upgrade - master to forward zone transformation

Metadata Update from @pspacek:
- Issue assigned to pspacek
- Issue set to the milestone: FreeIPA 4.3.2

7 years ago

Login to comment on this ticket.

Metadata