Xc 0 @@ sR
d d k l Z d d k Z d d k Z d d k Z d d k l Z d d k l Z l Z l
Z
d d k l Z d d k l
Z
l Z l Z l Z l Z l Z l Z d d k Td d k l Z l Z d d k l Z l Z l Z l Z l Z l Z l Z l Z l Z l! Z! l" Z" d d
k# l$ Z$ l% Z% l& Z& e d Z' d d
d d d d d d d d d d d d d d d d d d d d! d" d# d$ d% d& d' d( d) d* d+ d, d- f" Z( d. Z) d/ d0 f Z* d1 f Z+ d2 d3 d4 f Z, g Z- e( D] Z. e- e/ d5 e. i0 q[- Z1 d6 d7 d8 d9 f Z2 d: Z3 d; Z4 d< Z5 e6 d= Z7 d> Z8 d? Z9 d@ Z: dA Z; dB Z< e= dC Z> dD Z? dE Z@ dF ZA dG ZB dH ZC dI ZD dJ ZE dK ZF e6 dL ZG eH eH dM ZI eH eH dN ZJ dO e f dP YZK dQ eK f dR YZL dS eL f dT YZM dU eK f dV YZN dW eL f dX YZO dY eK f dZ YZP d[ eK f d\ YZQ d] eK f d^ YZR d_ eK f d` YZS da eK f db YZT dc eK f dd YZU de eK f df YZV dg eK f dh YZW di eK f dj YZX dk eK f dl YZY dm eK f dn YZZ do eK f dp YZ[ dq eK f dr YZ\ ds eK f dt YZ] du eK f dv YZ^ dw eK f dx YZ_ dy eK f dz YZ` d{ eK f d| YZa d} eK f d~ YZb d Zc d eK f d YZd d eK f d YZe d eK f d YZf d Zg d eK f d YZh d Zi d eK f d YZj d eK f d YZk d ej f d YZl d eK f d YZm d eK f d YZn d eK f d YZo d eK f d YZp d eK f d YZq eM eO eN eP eQ eR eS eT eU eV eW eX eY e[ eZ e\ e] e^ ed e_ e` ea eb ee el ef ej ek eh em en eo ep eq f" Zr d Zs et es Zu et d er D Zv d Zw d Zx d Zy e d d e d f Zz d e{ f d YZ| e i} e| d e~ f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e{ f d YZ e i} e d e~ f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d e{ f d YZ e i} e d e f d YZ e i} e d e f d YZ e i} e d S( i ( t absolute_importN( t context( t apit errorst output( t Command( t Flagt Boolt Intt Decimalt Strt StrEnumt Any( t *( t _t ngettext( t validate_zonemgrt normalize_zonemgrt normalize_zonet validate_hostnamet validate_dns_labelt validate_domain_namet" get_dns_forward_zone_update_policyt" get_dns_reverse_zone_update_policyt get_reverse_zone_defaultt zone_is_reverset REVERSE_DNS_ZONES( t valid_ipt CheckedIPAddresst is_host_resolvables
Domain Name System (DNS)
Manage DNS zone and resource records.
USING STRUCTURED PER-TYPE OPTIONS
There are many structured DNS RR types where DNS data stored in LDAP server
is not just a scalar value, for example an IP address or a domain name, but
a data structure which may be often complex. A good example is a LOC record
[RFC1876] which consists of many mandatory and optional parts (degrees,
minutes, seconds of latitude and longitude, altitude or precision).
It may be difficult to manipulate such DNS records without making a mistake
and entering an invalid value. DNS module provides an abstraction over these
raw records and allows to manipulate each RR type with specific options. For
each supported RR type, DNS module provides a standard option to manipulate
a raw records with format ---rec, e.g. --mx-rec, and special options
for every part of the RR structure with format ---, e.g.
--mx-preference and --mx-exchanger.
When adding a record, either RR specific options or standard option for a raw
value can be used, they just should not be combined in one add operation. When
modifying an existing entry, new RR specific options can be used to change
one part of a DNS record, where the standard option for raw value is used
to specify the modified value. The following example demonstrates
a modification of MX record preference from 0 to 1 in a record without
modifying the exchanger:
ipa dnsrecord-mod --mx-rec="0 mx.example.com." --mx-preference=1
EXAMPLES:
Add new zone:
ipa dnszone-add example.com --name-server=ns \
--admin-email=admin@example.com \
--ip-address=10.0.0.1
Add system permission that can be used for per-zone privilege delegation:
ipa dnszone-add-permission example.com
Modify the zone to allow dynamic updates for hosts own records in realm EXAMPLE.COM:
ipa dnszone-mod example.com --dynamic-update=TRUE
This is the equivalent of:
ipa dnszone-mod example.com --dynamic-update=TRUE \
--update-policy="grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;"
Modify the zone to allow zone transfers for local network only:
ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8
Add new reverse zone specified by network IP address:
ipa dnszone-add --name-from-ip=80.142.15.0/24 \
--name-server=ns.example.com.
Add second nameserver for example.com:
ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com
Add a mail server for example.com:
ipa dnsrecord-add example.com @ --mx-rec="10 mail1"
Add another record using MX record specific options:
ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2
Add another record using interactive mode (started when dnsrecord-add, dnsrecord-mod,
or dnsrecord-del are executed with no options):
ipa dnsrecord-add example.com @
Please choose a type of DNS resource record to be added
The most common types for this type of zone are: NS, MX, LOC
DNS resource record type: MX
MX Preference: 30
MX Exchanger: mail3
Record name: example.com
MX record: 10 mail1, 20 mail2, 30 mail3
NS record: nameserver.example.com., nameserver2.example.com.
Delete previously added nameserver from example.com:
ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.
Add LOC record for example.com:
ipa dnsrecord-add example.com @ --loc-rec="49 11 42.4 N 16 36 29.6 E 227.64m"
Add new A record for www.example.com. Create a reverse record in appropriate
reverse zone as well. In this case a PTR record "2" pointing to www.example.com
will be created in zone 15.142.80.in-addr.arpa.
ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse
Add new PTR record for www.example.com
ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.
Add new SRV records for LDAP servers. Three quarters of the requests
should go to fast.example.com, one quarter to slow.example.com. If neither
is available, switch to backup.example.com.
ipa dnsrecord-add example.com _ldap._tcp --srv-rec="0 3 389 fast.example.com"
ipa dnsrecord-add example.com _ldap._tcp --srv-rec="0 1 389 slow.example.com"
ipa dnsrecord-add example.com _ldap._tcp --srv-rec="1 1 389 backup.example.com"
The interactive mode can be used for easy modification:
ipa dnsrecord-mod example.com _ldap._tcp
No option to modify specific record provided.
Current DNS record contents:
SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 backup.example.com
Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):
Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y
SRV Priority [0]: (keep the default value)
SRV Weight [1]: 2 (modified value)
SRV Port [389]: (keep the default value)
SRV Target [slow.example.com]: (keep the default value)
1 SRV record skipped. Only one value per DNS record type can be modified at one time.
Record name: _ldap._tcp
SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 389 slow.example.com
After this modification, three fifths of the requests should go to
fast.example.com and two fifths to slow.example.com.
An example of the interactive mode for dnsrecord-del command:
ipa dnsrecord-del example.com www
No option to delete specific record provided.
Delete all? Yes/No (default No): (do not delete all records)
Current DNS record contents:
A record: 1.2.3.4, 11.22.33.44
Delete A record '1.2.3.4'? Yes/No (default No):
Delete A record '11.22.33.44'? Yes/No (default No): y
Record name: www
A record: 1.2.3.4 (A record 11.22.33.44 has been deleted)
Show zone example.com:
ipa dnszone-show example.com
Find zone with "example" in its domain name:
ipa dnszone-find example
Find records for resources with "www" in their name in zone example.com:
ipa dnsrecord-find example.com www
Find A records with value 10.10.0.1 in zone example.com
ipa dnsrecord-find example.com --a-rec=10.10.0.1
Show records for resource www in zone example.com
ipa dnsrecord-show example.com www
Delegate zone sub.example to another nameserver:
ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5
ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.
If global forwarder is configured, all requests to sub.example.com will be
routed through the global forwarder. To change the behavior for example.com
zone only and forward the request directly to ns.sub.example.com., global
forwarding may be disabled per-zone:
ipa dnszone-mod example.com --forward-policy=none
Forward all requests for the zone external.com to another nameserver using
a "first" policy (it will send the queries to the selected forwarder and if
not answered it will use global resolvers):
ipa dnszone-add external.com
ipa dnszone-mod external.com --forwarder=10.20.0.1 \
--forward-policy=first
Delete zone example.com with all resource records:
ipa dnszone-del example.com
Resolve a host name to see if it exists (will add default IPA domain
if one is not included):
ipa dns-resolve www.example.com
ipa dns-resolve www
GLOBAL DNS CONFIGURATION
DNS configuration passed to command line install script is stored in a local
configuration file on each IPA server where DNS service is configured. These
local settings can be overridden with a common configuration stored in LDAP
server:
Show global DNS configuration:
ipa dnsconfig-show
Modify global DNS configuration and set a list of global forwarders:
ipa dnsconfig-mod --forwarder=10.0.0.1
u Au AAAAu A6u AFSDBu APLu CERTu CNAMEu DHCIDu DLVu DNAMEu DNSKEYu DSu HIPu IPSECKEYu KEYu KXu LOCu MXu NAPTRu NSu NSECu NSEC3u
NSEC3PARAMu PTRu RRSIGu RPu SIGu SPFu SRVu SSHFPu TAu TKEYu TSIGu TXTu @t At AAAAt PTRt NSt MXt LOCs %srecordu INu CSu CHu HSc C@ s1 y t | Wn t j
o } t | SXd S( N( R t
ValueErrort unicodet None( t ugettextt zonemgrt e( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _rname_validator s
c C@ s t t i S( s1
Generate serial number for zones. bind-dyndb-ldap expects unix time in
to be used for SOA serial.
SOA serial in a date format would also work, but it may be set to far
future when many DNS updates are done per day (more than 100). Unix
timestamp is more resilient to this issue.
( t intt time( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _create_zone_serial s c C@ s y t i | Wn t i t f j
o n Xt t | St i | } | i i i d } | i
d j o d i | d | i d S| i
d j o d i | d | i d Sd Sd S( Nt .i u .i i i ( t netaddrt IPAddresst AddrFormatErrorR$ R% R t IPNetworkt ipt reverse_dnst splitt versiont joint prefixlenR& ( t netstrt nett items( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _reverse_zone_name s c C@ s y^ t i | d t i } | d j o5 | i | j o! t d t d | i d | Sn Wn# t i t f j
o t d SXd S( Nt flagssF invalid IP address version (is %(value)d, must be %(required_value)d)!t valuet required_values invalid IP address format( R/ R0 t INET_PTONR& R6 R t dictR1 R$ ( R' t ipaddrt
ip_versionR3 ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _validate_ipaddr s
c C@ s t | | d S( Ni ( RD ( R' RB ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _validate_ip4addr) s c C@ s t | | d S( Ni ( RD ( R' RB ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _validate_ip6addr, s c C@ s@ y t i | } Wn& t i t t f j
o t d SXd S( Ns invalid IP network format( R/ R2 R1 R$ t UnboundLocalErrorR R& ( R' t ipnetR: ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _validate_ipnet/ s
c
C@ s | p d S| i d } | d o t d S| i d x | D] } | d j o qE n | i d o | d } n y" t | d
t d t d t } WqE t i t f j
o } t | St
j
o t d
SXqE Wd S( Nt ;is4 each ACL element must be terminated with a semicolont anyt nonet localhostt localnetst !i t
parse_netmaskt
allow_networkt allow_loopbacku invalid address format( s anyRL RM RN ( R5 R t popt
startswithR t TrueR/ R1 R$ R% RG ( R' t bind_acist bind_aciR3 R) ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _validate_bind_aci6 s&
c
C@ s+ | p d S| i d } g } x | D] } | p q( n | d j o | i | q( n d } | i d o | d } d } n yi t | d t d
t d t } d | j o d
| i } n d } | i d | t | | f w( Wq( | i | q( q( Xq( Wd i | } | d 7} | S( NRJ RK RL RM RN t RO i RP RQ RR t /s /%su %s%s%su ;( s anys nones localhosts localnets( R5 t appendRT R RU R8 t strR7 ( RV t
normalizedRW t prefixR3 t netmaskt acis( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _normalize_bind_aciO s:
c C@ s_ | t j o d Sy t | d t d t d | Wn& t j
o } t d t | SXd S( Nt
check_fqdnt allow_underscoret allow_slashs invalid domain-name: %s( t _dns_zone_recordR t FalseRU R$ R R% R& ( R' R> Rd R) ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _bind_hostname_validatorq s
c C@ s t | | d t S( sU
Validator for CNAME allows classless domain names (25/0.0.10.in-addr.arpa.)
Rd ( Rg RU ( R' R> ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _bind_cname_hostname_validator~ s c C@ sR | t j o d Sy t d | i d Wn t j
o } t | SXd S( Nc S@ s t | d t d t S( Rc Rd ( R RU ( t label( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt s u .( Re t mapR5 R$ R% ( R' R> R) ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _dns_record_name_validator s
c C@ s | i d \ } } } t | | } | d j o | S| oe y7 t | } | d j p
| d j o
t n Wq t j
o t d t d | SXn d S( Nu port i i s %(port)s is not a valid portt port( t partitionRD R& R+ R$ R RA ( R' t forwardert
ip_addresst sepRm t ip_address_validation( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _validate_bind_forwarder s
c C@ sI y& t | } t | d t | Wn t j
o } t | SXd S( NRd ( R R R R$ R% ( R' R> t normalized_zoneR) ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _domain_name_validator s
c C@ s; y t | Wn& t j
o } t d t | SXd S( Ns invalid domain-name: %s( R R$ R R% R& ( R' R> R) ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _hostname_validator s
c C@ s" | d d j o | d S| Sd S( s Make it fully-qualifiediR. N( ( t domain_name( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _normalize_hostname s c C@ s t i | } | i d j o t i d | d | } n: | i d j o t i d | d | } n
t d | d d j S( Ni t dnsrecord_findt arecordi t
aaaarecords Invalid address familyt counti ( R/ R0 R6 R R R$ ( t zonet str_addresst addrt result( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt is_forward_record s c C@ s t i | } yl | i d j o t i d | | d | n; | i d j o t i d | | d | n
t d Wn t i j
o n Xd S( Ni t
dnsrecord_addRz i R{ s Invalid address family( R/ R0 R6 R R R$ R t EmptyModlist( R} t nameR~ R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt add_forward_record s c
C@ s t i | } t | i } | d j op d } t i d d } x | D]G } | d d } | i | o# t | t | j o
| } qL qL Wn | i d j o d | d } n# | i d j o d | d } n | i i
d
} d i | | } y t i d | Wn t i
j
o
d } n Xt | d j o) t i
d
t d t d | n | t | d }
| |
f S( Nu t dnszone_findR t idnsnamei i i i i R. u .t dnszone_showt reasons2 DNS reverse zone for IP address %(addr)s not foundR i ( R/ R0 R% R4 R& R R t endswitht lenR6 R5 R7 R t NotFoundR RA ( RB R8 R3 t revdnst revzoneR R} t zonenamet posR; t revname( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt get_reverse_zone s2
) c
C@ s y t i d | d Wn; t i j
o, t i d t d t d | n Xt | t t f p
| g } n xi| D]a} y t | d t
} Wn3 t j
o' } t i d | d t
| n X| oO t | t
| o5 t i d t d
t d t | d | q)n | o y d } | i p
| i } n t | | \ }
} t i d
|
d | } | d d j o5 t i d t d t d t | d |
n Wqt i j
o qXq q Wd S( NR R R s DNS zone %(zone)s not foundR} t match_localR t errort messageu; IP address %(ip)s is already assigned in domain %(domain)s.R3 t domainRy R R| i uM Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s.( R R R R R RA t
isinstancet tuplet listR Rf t Exceptiont ValidationErrorR% R t DuplicateEntryR\ R& t
defaultnetR8 R (
t option_namet hostR t ip_addressest
check_forwardt
check_reverseRp R3 R) R8 R R t reverse( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt add_records_for_host_validation s> !
# '
'c C@ s t | t t f p
| g } n x | D] } t | d t } | o t | | t | n | o yb d } | i p
| i } n t
| | \ } } h | d | d 6}
t i d | | |
Wq t
i j
o q Xq* q* Wd S( NR R. t ptrrecordR ( R R R R Rf R R% R& R R8 R R R R R ( R R R t add_forwardt add_reverseRp R3 R8 R R t addkw( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt add_records_for_host s"
t DNSRecordc B@ sM e Z d Z d Z e Z e d Z d Z e d Z
e d Z e d Z d Z
d Z d Z d Z e i d e e f d e e f f Z d Z d Z d d
Z d Z d Z e d
Z d Z d d Z d Z d Z d Z d Z d Z d Z! d Z" d d Z# d d Z$ e% d Z& d Z' d Z( RS( s %s records %s %ss& Comma-separated list of raw %s recordss %s Records (see RFC %s for details)s
%s_part_%ss %s_extra_%ss %s_%st validatednst normalizednsc O@ s | i t j o, t d t | i d i t f n | p d | i i } n | i d d | i i | i d | i | i | i d | i | i | i d | i | i t
| d <| i p d | d t values( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _get_part_values[ s c @ s- i | d i f d | D S( Nu c 3@ s? x8 | ]1 } | d j o t t i | Vq q Wd S( N( R& R R t _convert_scalar( t .0t v( t indexR ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys c s ( t _validate_partsR7 ( R R R ( ( R R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _part_values_to_stringa s
c @ s t f d i D } t f d | D } t d | D o d S| o x t | D]y \ } } | d j o` i | i oO i i i i | i f } t
i d i d t d | qk qk Wn | S( Nc 3@ s2 x+ | ]$ } i i i | i f Vq Wd S( N( t part_name_formatR R R ( R t part( R ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys g s c 3@ s" x | ] } i | Vq Wd S( N( t get( R t part_name( R ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys i s c s@ s x | ] } | d j Vq Wd S( N( R& ( R t val( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys k s R R s% '%s' is a required part of DNS record(
R R t allt enumerateR& t requiredt cli_name_formatR R R R t ConversionErrorR ( R R t
raise_on_nonet
part_namest valst val_idR R ( ( R R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt get_parts_from_kwf s
& c C@ sE t | t | i j o% t i d | i d t d n d S( NR R s Invalid number of parts!( R R R R R R ( R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR w s c C@ s@ t | t t f o | i | | St t | i | | S( N( R R R R R R R ( R R> R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR | s c @ s} i o] t | t t f o t f d | D } qg | d j o i | f } qg n t t i | S( Nc 3@ s3 x, | ]% } | d j o i | Vq q Wd S( N( R& t _normalize_parts( R R ( R ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys s ( R R R R R& R R R t normalize( R R> ( ( R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s
c C@ s | i d j o | Sy | i | } | p | Sg } t | i D]8 \ } } | | | d j o | i | | n d qG ~ } g } t | i D] \ } } | | i | | q ~ } | i | } Wn t j
o n X| S( sO
Normalize a DNS record value using normalizers for its parts.
N( R R& R R R R R ( R R> R t _[1]t part_idR t converted_valuest _[2]t
new_values( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s N6c
C@ s^ | i p d S| d j o d S| d j o d S| i p | d | i S| i d j o d S| i | } | p | i p| g } | i D] } | | i i q ~ } | i o d | i
| i } n d } | d t d d i | d | S| i Sn xL t
| i D]; \ } } | i | | } | i | } | i | qWd S( Ns; DNS RR type "%s" is not supported by bind-dyndb-ldap plugint RY s1 format must be specified as "%(format)s" %(rfcs)st formatt rfcs( R R& R R R R t format_error_msgR t uppert rfct see_rfc_msgRA R7 R R t convertt validate(
R R R> R R R R R R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _rule_validatedns s6
-
c C@ s | i | i i | i f } | i | i i | i f } | i | i t | i f } | i | i } t | i
d d g } | i p | i d n | i
| d | d | d t d | d | d | i S(
s
All parts of DNSRecord need to be processed and modified before they
can be added to global DNS API. For example a prefix need to be added
before part name so that the name is unique in the global namespace.
t dnsrecord_partt virtual_attributet dnsrecord_optionalR Ri R R R= t hint( R R R R R t part_label_formatR% Ri R R R= R R[ t clone_renameRf ( R R R R Ri R R= ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _convert_dnsrecord_part s
c C@ s | i | i i | i f } | i | i i | i f } | i | i t | i f } | i | i } t | i
d d g } | i | d | d | d t d | d | d | i S( s
Parameters for special per-type behavior need to be processed in the
same way as record parts in _convert_dnsrecord_part().
t dnsrecord_extraR R Ri R R R= R (
t extra_name_formatR R R R R R% Ri R R R= R Rf ( R t extraR R Ri R R= ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _convert_dnsrecord_extra s c @ s5 i d j o t St f d i D S( Nc 3@ s" x | ] } i | Vq Wd S( N( R ( R R ( R ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys s ( R R& R ( R ( ( R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt get_parts s c @ s5 i d j o t St f d i D S( Nc 3@ s" x | ] } i | Vq Wd S( N( R ( R R ( R ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys s ( R R& R ( R ( ( R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt get_extra s c
C@ s | i | i i | i f } | i | i t | i f } | i } x t o yJ | i i
| d | d | } | i p
| } n | | | | t exc(
t getattrR R t delattrR Rf RU R R t
NonFatalErrorR RA R% ( R R R R R R t rev_recordsR R) ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR ^ s ( R R R R R R
R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR E s t ARecordc B@ s2 e Z d Z d Z e d e d e d f Z RS( R i Rp Ri s
IP Address( R R R R R
RE R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR o s
t A6Recordc B@ s8 e Z d Z d Z e d d e d f Z d Z RS( t A6i t dataRi s Record datac C@ s | f S( N( ( R R> ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s ( R R R R R
R R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR y s
t
AAAARecordc B@ s2 e Z d Z d Z e d e d e d f Z RS( R i Rp Ri s
IP Address( R R R R R
RF R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR# s
t AFSDBRecordc B@ sS e Z d Z d Z e d d e d d d d d e d e d e d
f Z RS( t AFSDBi s subtype?Ri t Subtypet minvaluei t maxvaluei t hostnamet Hostname( R R R R R R R
Rg R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR$ s t APLRecordc B@ s e Z d Z d Z e Z RS( t APLi3 ( R R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR+ s t
CERTRecordc
B@ s e Z d Z d Z e d d e d d d d d e d d e d
d d d d e d d e d d d d d
e d d e d f Z RS( t CERTi. t typeRi s Certificate TypeR' i R( i t key_tags Key Tagt algorithmt Algorithmi t certificate_or_crls Certificate/CRL( R R R R R R R
R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR- s t CNAMERecordc B@ s> e Z d Z d Z e d e d e d d e d f Z RS( t CNAMEi R) Ri R* R s. A hostname which this alias hostname points to( R R R R R
Rh R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR4 s t DHCIDRecordc B@ s e Z d Z d Z e Z RS( t DHCIDi] ( R R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR6 s t DLVRecordc B@ s e Z d Z d Z e Z RS( t DLViO ( R R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR8 s t DNAMERecordc B@ s2 e Z d Z d Z e d e d e d f Z RS( t DNAMEip
t targetRi t Target( R R R R R
Rh R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR: s
t DNSKEYRecordc B@ s e Z d Z d Z e Z RS( t DNSKEYi ( R R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR> s t DSRecordc
B@ s e Z d Z d Z e d d e d d d d d e d d e d
d d d d e d d e d
d d d d e d d e d f Z RS( t DSi R0 Ri s Key TagR' i R( i R1 R2 i t digest_types Digest Typet digestt Digest( R R R R R R R
R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR@ s t HIPRecordc B@ s e Z d Z d Z e Z RS( t HIPiU ( R R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRE s t KEYRecordc
B@ s e Z d Z d Z e d d e d d d d d e d d e d
d d d d e d d e d
d d d d e d d e d f Z RS( t KEYi R= Ri t FlagsR' i R( i t protocolt Protocoli R1 R2 t
public_keys
Public Key( R R R R R R R
R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRG s t IPSECKEYRecordc B@ s e Z d Z d Z e Z RS( t IPSECKEYi ( R R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRM s t KXRecordc
B@ sk e Z d Z d Z e d d e d d e d d d d d
e d e d e d d e d
f Z RS( t KXi t
preferenceRi t
PreferenceR sC Preference given to this exchanger. Lower values are more preferredR' i R( i t exchangert Exchangers( A host willing to act as a key exchanger( R R R R R R R
Rg R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRO s t LOCRecordc B@ s e Z d Z d Z e d d e d d d d d e d d e d
d d d d e d d e d
d d d d d d e d d e d d d1 e d d e d d d d d e d d e d d d d d e d d e d d d d d d d e d d e d d d2 e d" d e d# d d$ d d% d d& e d' d e d( d d d d) d d& e d* d e d+ d d d d) d d& e d, d e d- d d d d) d d& f Z e d. Z d/ Z
d0 Z RS(3 R# iT t lat_degRi s Degrees LatitudeR' i R( iZ s lat_min?s Minutes Latitudei; s lat_sec?s Seconds Latitudes 0.0s 59.999t precisioni t lat_dirs Direction LatitudeR u Nu St lon_degs Degrees Longitudei s lon_min?s Minutes Longitudes lon_sec?s Seconds Longitudet lon_dirs Direction Longitudeu Eu Wt altitudet Altitudes
-100000.00s 42849672.95i s size?t Sizes 90000000.00s h_precision?s Horizontal Precisions v_precision?s Vertical Precisions format must be specified as
"d1 [m1 [s1]] {"N"|"S"} d2 [m2 [s2]] {"E"|"W"} alt["m"] [siz["m"] [hp["m"] [vp["m"]]]]"
where:
d1: [0 .. 90] (degrees latitude)
d2: [0 .. 180] (degrees longitude)
m1, m2: [0 .. 59] (minutes latitude/longitude)
s1, s2: [0 .. 59.999] (seconds latitude/longitude)
alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)
siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)
See RFC 1876 for detailsc C@ sJ t i d } | i | } | d j o d St d | i D S( Ns. (?P\d{1,2}\s+)(?P\d{1,2}\s+)?(?P\d{1,2}\.?\d{1,3}?\s+)?(?P[N|S])\s+(?P\d{1,3}\s+)(?P\d{1,2}\s+)?(?P\d{1,2}\.?\d{1,3}?\s+)?(?P[W|E])\s+(?P-?\d{1,8}\.?\d{1,2}?)m?\s*(?P\d{1,8}\.?\d{1,2}?)?m?\s*(?P\d{1,8}\.?\d{1,2}?)?m?\s*(?P\d{1,8}\.?\d{1,2}?)?m?\s*$c s@ s3 x, | ]% } | d j o
| i n | Vq Wd S( N( R& R ( R t x( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys s ( t ret compilet matchR& R t groups( R R> t regext m( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR | s
c @ sK t t | i t d t | i D d d d d f } x | D] } | d } | d j o | d
} t f d | D o | i | i i
| d f } g } | d
D]# } | | i | i i
| f q ~ } t d t d
d i | d | }
t
i d | i d |
qCqN qN Wd S( Nc s@ s( x! | ] \ } } | i | f Vq Wd S( N( R ( R R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys s t lat_sect lat_mint lon_sect lon_mint h_precisiont sizet v_precisioni i c 3@ s' x | ] } | d j Vq Wd S( N( R& ( R R ( R t
part_name_map( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys s s7 '%(required)s' must not be empty when '%(name)s' is setR s , R R ( Re Rf ( Rg Rh ( Ri s size( Rk Ri s size( R RU R RA R R R& RK R R R R R7 R R R ( R R t requirementst reqt target_partt required_partst target_cli_nameR R t required_cli_namesR ( ( Rl R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s(
4
( u Nu S( u Eu W( R R R R R R R R R R R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRU + st t MXRecordc
B@ sk e Z d Z d Z e d d e d d e d d d d d
e d e d e d d e d
f Z RS( R" i RQ Ri RR R sC Preference given to this exchanger. Lower values are more preferredR' i R( i RS RT s) A host willing to act as a mail exchanger( R R R R R R R
Rg R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRs s t NSRecordc B@ s2 e Z d Z d Z e d e d e d f Z RS( R! i R) Ri R* ( R R R R R
Rg R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRt s
t
NSECRecordc B@ s{ e Z d Z d Z e d Z d
e Z e d e d e d e
d d e d d e d
e f Z d Z
d Z RS( t NSECi sY format must be specified as "NEXT TYPE1 [TYPE2 [TYPE3 [...]]]" (see RFC 4034 for details)u SOAt nextRi s Next Domain Names types+s Type MapR R c C@ s< | i } t | d j o d S| d t | d f S( Ni i i ( R5 R R& R ( R R> R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s c @ st i | | d g } | d } t | t t f p
| g } n | i | d i f d | D S( Ni i u c 3@ s9 x2 | ]+ } | d j o t i | Vq q Wd S( N( R& R
R ( R R ( R R ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys s ( R R R R t extendR7 ( R R R t values_flatt types( ( R R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s
( u SOA( R R R R R R R t _allowed_typesR
Rg R RU R R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRu s
t NSEC3Recordc B@ s e Z d Z d Z e Z RS( t NSEC3i# ( R R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR| s t NSEC3PARAMRecordc B@ s e Z d Z d Z e Z RS( t
NSEC3PARAMi# ( R R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR~ s c C@ sQ d } | i d d i d d } x& | D] } | | j o t d Sq+ Wd S( Nu SAUPt "RY s 's* flags must be one of "S", "A", "U", or "P"( t replaceR ( R' R= t
allowed_flagst flag( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _validate_naptr_flags s
t NAPTRRecordc
B@ s e Z d Z d Z e d d e d d d d d e d d e d
d d d d e d e d e d d
d e d d e d e d d e d e d d e d f Z RS( t NAPTRic t orderRi t OrderR' i R( i RQ RR R= RI t
normalizerc C@ s
| i S( ( R ( R^ ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRj s t servicet Servicet regexps Regular Expressiont replacementt Replacement( R R R R R R R
R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s( t PTRRecordc
B@ sD e Z d Z d Z e d e d e d e d d e d f Z RS( R i R) R Ri R* R s* The hostname this reverse record points to( R R R R R
Rv Rx R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s t RPRecordc B@ s e Z d Z d Z e Z RS( t RPi ( R R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR % s c C@ s | d j o d St | | S( Nu .( Rg ( R' R> ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _srv_target_validator* s
t SRVRecordc B@ s e Z d Z d Z e d d e d d d d d e d d e d
d d d d e d d e d d d d d e d
e d e d d e d f Z RS( t SRVi
t priorityRi t PriorityR' i R( i t weightt WeightRm t PortR< R= R sb The domain name of the target host or '.' if the service is decidedly not available at this domain( R R R R R R R
R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR 0 s$ c C@ s; d } y t i | | Wn t j
o t d SXd S( Ns %Y%m%d%H%M%Ss6 the value does not follow "YYYYMMDDHHMMSS" time format( R, t strptimeR$ R ( R' R> t time_format( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _sig_time_validatorJ s
t SIGRecordc B@ sL e Z d Z d Z e d g g Z e D] Z e d j o e e q& q& [ Z e d d e
d d e e d d e
d d
d d d
e d d e
d d
d d d
e d d e
d d
d e d e
d e
d e d e
d e
d e d d e
d d
d d d e d d e
d e d d e
d f Z RS( t SIGi u SOAu SIGt type_coveredRi s Type CoveredR R1 R2 R' i R( i t labelst Labelst original_ttls Original TTLt signature_expirations Signature Expirationt signature_inceptions Signature InceptionR0 s Key Tagi t signers_names
Signer's Namet signaturet Signature( R R R R R R R R^ R{ R R R R
R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR R s> ? t SPFRecordc B@ s e Z d Z d Z e Z RS( t SPFi8 ( R R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s t RRSIGRecordc B@ s e Z d Z d Z RS( t RRSIGi ( R R R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s t SSHFPRecordc B@ sq e Z d Z d Z e d d e d d d d d e d d e d
d d d d e d d e d f Z RS(
t SSHFPi R1 Ri R2 R' i R( i t fp_types Fingerprint Typet fingerprintt Fingerprint( R R R R R R R
R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s t TARecordc B@ s e Z d Z e Z RS( t TA( R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s t
TKEYRecordc B@ s e Z d Z e Z RS( t TKEY( R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s t
TSIGRecordc B@ s e Z d Z e Z RS( t TSIG( R R R Rf R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s t TXTRecordc B@ s8 e Z d Z d Z e d d e d f Z d Z RS( t TXTi R" Ri s Text Datac C@ s | f S( N( ( R R> ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s ( R R R R R
R R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s
c
c@ s x t d d t d d d d d g t d d t d d d d d g t d
d t d d d d d g f D] } | Vqs WxK t D]C } | Vx | i D] } | Vq Wx | i D] } | Vq Wq Wd S( Ns dnsrecords?Ri t RecordsR= t no_createt no_searchR s dnstype?s Record types dnsdata?s Record data( R R R
t _dns_recordsR R ( t optt optionR R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt __dns_record_options_iter s(
c c@ s* x# | ] } | i o | i Vq q Wd S( N( R R ( R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys s c C@ s | t j o t | } nC | i d p2 | i d p | d 7} n d | | f } n y t i d | SWn9 t i j
o* t i d t d h | d 6 n Xd S( NR. s %s.%st dns_resolveR sA Nameserver '%(host)s' does not have a corresponding A/AAAA recordR ( Re R R R R R R R ( R} R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt check_ns_rec_resolvable s
c C@ s8 y | i t i i g Wn t i j
o t SXt S( N( t get_entryR t envt
container_dnsR R Rf RU ( R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt dns_container_exists s
c C@ s5 t | o t t i i | St t i i Sd S( N( R R R R t realmR ( R} ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt default_zone_update_policy
s
t managedbyRi s Managedby permissiont dnszonec B@ s e Z d Z e i i Z e d Z e d Z d d d g Z
d g Z d d d d
d d d
d d d d d d g
e Z
e d Z e d Z e d e d d d e d d e d d d d d d e e d! e d e d" d e d# d$ d| e d d d& d e d' d e d( d d) e d
e d d* d e d+ d e d+ d d, d e e d d d- d e d. d e d/ d0 d1 d2 d3 d e d4 e e d d d5 d e d6 d e d7 d0 d8 d2 d9 d: d; d4 e e d
d d< d e d= d e d> d0 d8 d2 d9 d: d? d4 e e d d d@ d e dA d e dB d: dC d0 d8 d2 d9 d4 e e d d dD d e dE d e dF d: d; d0 d8 d2 d9 d4 e e dG d dH d e dI d e dJ d0 d8 d2 d9 e dK d dL d e dM d e dN dO e e dP d dQ d e dR d e dR d dS d4 e e dT d dU d e dV d e dW d$ dX dY g dZ e e d[ d d\ d e d] d e d^ dZ e d: e d4 e e d_ e d e d d` d e da d e db d: dc d4 e e dd e d e d de d e df d e dg d: dh d4 e e di e d dj d e dk d e dl dm e e dn d do d e dp d e dq dO d} e du d dv d e dw d e dx f Z dy Z dz Z! d{ Z" RS(~ s3
DNS Zone, container for resource records.
s DNS zones DNS zonest topt
idnsrecordt idnszonet
ipadnszoneR t idnszoneactivet idnssoamnamet idnssoarnamet
idnssoaserialt idnssoarefresht idnssoaretryt
idnssoaexpiret idnssoaminimumt idnsallowqueryt idnsallowtransfert idnsforwarderst idnsforwardpolicys DNS Zoness DNS ZoneR R Ri s Zone nameR s Zone name (FQDN)t default_fromc C@ s
t | S( ( R< ( t name_from_ip( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRj . s R c C@ s
| i S( ( R ( R> ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRj / s t primary_keys
name_from_ip?s Reverse zone IP networks+ IP network to create reverse zone name fromR= R t name_servers Authoritative nameservers$ Authoritative nameserver domain namec C@ s
| i S( ( R ( R> ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRj ; s t admin_emails Administrator e-mail addressc C@ s d | S( s
hostmaster.%s( ( R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRj B s t serials
SOA serials SOA record serial numberR' i R( l t autofillt refreshs SOA refreshs SOA record refresh timei iR i t retrys SOA retrys SOA record retry timei t expires
SOA expires SOA record expire timei u t minimums SOA minimums, How long should negative responses be cacheds dnsttl?t ttls SOA time to lives SOA record time to lives dnsclass?t classs SOA classs SOA record classR s idnsupdatepolicy?t
update_policys BIND update policyc C@ s
t | S( ( R ( R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRj s s idnszoneactive?t zone_actives Active zones Is zone active?R R t attributes idnsallowdynupdate?t dynamic_updates Dynamic updates Allow dynamic updates.s idnsallowquery?t allow_querys Allow querysW Semicolon separated list of IP addresses or networks which are allowed to issue queriesu any;s idnsallowtransfer?t allow_transfers Allow transfers[ Semicolon separated list of IP addresses or networks which are allowed to transfer the zoneu none;s idnsforwarders*Ro s Zone forwarderss A list of per-zone forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT"R s idnsforwardpolicy?t forward_policys Forward policys Per-zone conditional forwarding policy. Set to "none" to disable forwarding to global forwarder for this zone. In that case, conditional zone forwarders are disregarded.u onlyu firstu nones idnsallowsyncptr?t allow_sync_ptrs Allow PTR syncsP Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the zonec O@ s | d } t t | i | | } y | i i | d g Wn t i j
o | i d o | d } n | d } t t | i | | } y" | i i | d g \ } } Wq t i j
o q Xn X| S( NiRY u .( R R t get_dnR R R R R ( R R R R} R t test_dnR ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s
"
c C@ s d | S( Nu Manage DNS zone %s( ( R R} ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt permission_name s c C@ s | t j o | S| i d o | d } n | i d o | d } n | i d } | i d } t | } xE t t | t | D]( \ } } | | j o d S| i q W| p t Sd i | S( s
Get name of a record that is to be added to a new zone. I.e. when
we want to add record "ipa.lab.example.com" in a zone "example.com",
this function should return "ipa.lab". Returns None when record cannot
be added to a zone
u .iN( Re R R5 R t zipt reversedR& RS R7 ( R R} R) t hostname_partst
zone_partst dns_namet host_partt zone_part( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt get_name_in_zone s$
( s virtual_attribute( u onlyu firstu none(# R R t __doc__R R R t container_dnR t object_namet object_name_pluralt object_classt possible_objectclassest _record_attributest default_attributesRi t label_singularR
Ru RU RI R* R R R- R t _record_classesR Rf RX Ra Rs t takes_paramsR R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s t dnszone_addc B@ sy e Z e d Z e i e Z e i e d d e d d e d e d e
d e d f Z d Z d Z RS(
s! Create new DNS zone (SOA record).t forceRi t ForceR s= Force DNS zone creation even if nameserver is not resolvable.s ip_address?s= Add forward record for nameserver located in the created zonec O@ s t | i i i p t i d t d n d | d <| d } t | o" t i d d d t d n | i d
} t
| d } | i d o | i i
| d | }
n | }
t | o_ | i d p" t i d d d t d
qt| o" t i d d
d t d qtnB | o: | i d o* |
o" t i d d
d t d n | o! | d o t | d | n | | d <| | d <| S( NR s DNS is not configuredt TRUER R R s name-serverR s' Nameserver address is not a domain nameRp iR. s9 Nameserver for reverse zone cannot be a relative DNS names; Nameserver DNS record is created for for forward zones onlysE Nameserver DNS record is created only for nameservers in current zoneR i t nsrecord( R R t Backendt ldap2R R R R R R R R t objR R R ( R R R R R
R R t
nameservert nameserver_ip_addressRt t record_in_zone( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt pre_callback s6
c O@ ss | i d } | oY | d d } | i d o | i i | d | } n | } t | d | | n | S( NRp R i R. i( R R R R R ( R R R R R R R R
t
dns_record( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt
post_callback1 s
(
R R R R t
LDAPCreatet has_output_paramst dnszone_output_paramst
takes_optionsR R
RD R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s
,t dnszone_delc B@ s e Z e d Z d Z RS( s Delete DNS zone (SOA record).c O@ sH y+ t i d | i i | d d t Wn t i j
o n Xt S( Nt permission_deliR ( R R R R RU R R ( R R R R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR F s ( R R R R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR C s t dnszone_modc B@ sX e Z e d Z e i e d d e d d e d f Z e i e Z d Z RS( s Modify DNS zone (SOA record).R Ri R R s5 Force nameserver change even if nameserver not in DNSc O@ sH | i d } | o. | t j o! | d o t | d | n | S( NR R i ( R Re R ( R R R R R
R R R
( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR ] s (
R R R R t
LDAPUpdateR R R R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR Q s
R c
B@ sp e Z e d Z e i e Z d Z d Z e i e
d d e d d d d e d f Z d Z RS(
s# Search for DNS zones (SOA records).c O@ sH d | j o" | i i d t | d n t t | i | | S( NR ( R t paramsR% R R t args_options_2_params( R t argsR ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR l s
"c O@ s_ d | j o9 d | j o! | i i d i | | d i( R R R t update_entryR R RA RU ( R R R R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt execute s ( R R R R R t standard_valuet
has_outputt msg_summaryR0 ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR- s t dnszone_enablec B@ s2 e Z e d Z e i Z e d Z d Z RS( s Enable DNS Zone.s Enabled DNS zone "%(value)s"c O@ sl | i i } | i i | | } y | i | h d d 6 Wn t i j
o n Xt d t d | d S( NR R R R> i( R R R R/ R R RA RU ( R R R R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR0 s ( R R R R R R1 R2 R3 R0 ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR4 s t dnszone_add_permissionc B@ s2 e Z e d Z e i Z e d Z d Z RS( s0 Add a permission for per-zone access delegation.s# Added system permission "%(value)s"c O@ s | i i } | i i | | } y | i | d g \ } } Wn& t i j
o | i i | n X| i i | d } t i d | d d d } h } | i
d }
|
o' |
i d t t
|
| d ( R R R R R R t handle_not_foundR R R R R[ R t setR/ RA RU ( R R R R R t dn_R R t
permissiont updatet dnszone_ocs( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR0 s(
( R R R R R R1 R2 R3 R0 ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR5 s t dnszone_remove_permissionc B@ s2 e Z e d Z e i Z e d Z d Z RS( s3 Remove a permission for per-zone access delegation.s% Removed system permission "%(value)s"c O@ s | i i } | i i | | } y | i | h d d 6 Wn; t i j
o | i i | n t i j
o n X| i i | d } t
i d | d t t
d t d | S( NR iR R R R> ( R R R R/ R& R R R9 R R R R RU RA ( R R R R R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR0 s ( R R R R R R1 R2 R3 R0 ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR? s t dnsrecordc B@ s e Z d Z d Z e i i Z e d Z e d Z
d d g Z d g e Z
e Z e d Z e d Z e d e d d
d e d d
e d d e e d d d d e d d
e d e d d d d e d d
e d d e f e Z e d d e d d
e d Z d Z d Z d Z d Z d Z d Z d Z! d! Z" e# d" Z$ d# Z% d$ Z& d% Z' e# d& Z( d' Z) RS(( s
DNS record.
R s DNS resource records DNS resource recordsR R R s DNS Resource Recordss DNS Resource RecordR R Ri s Record nameR R s dnsttl?R s Time to lives dnsclass?R t Classs DNS classR t
structuredt
Structureds= Parse all raw DNS records and return them in a structured wayc
O@ s | i | pu t | d | d } } y t | d t d t | Wq t j
o' } t i d d d t | q Xn d S( NiiRc Rd R R R ( t is_pkey_zone_recordR R RU R R$ R R R% ( R R R R R R R} R R) ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _idnsname_pre_callback0 s c O@ sZ | i d } | i d t p
| d j o d Sx | D] } t | d | q; Wd S( NR R i ( R Rf R& R ( R R R R R R t nsrecordsR ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _nsrecord_pre_callback8 s c O@ s | i d } | d j o d S| d } | i | o
d } n | d } d } xD t D]< }
| i |
o& | i |
d } |
} t |
} q\ q\ W| p; d i t } t i d d d t t
d
| n | o t | i d n d }
d | j o d | j o d
| j ox d
| j ok |
t | i d } | | j oA t i d d d t t
d t
d | d | d | qn d S( NR iu ii RY s , R R sa Reverse zone for PTR record should be a sub-zone of one the following fully qualified domains: %sR. RZ t -s\ Reverse zone %(name)s requires exactly %(count)d IP address components, %(user_count)d givenR| t
user_count( R R& RD R R R R7 R R R% R R R5 RA ( R R R R R R t
ptrrecordsR} R t zone_lent
valid_zonet zone_namet
allowed_zonest addr_lent ip_addr_comp_count( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt _ptrrecord_pre_callback@ s4
#
c O@ s[ | i i i } xE | D]= } t | d | d } | o | | | | | | q q Wd S( Ns _%s_pre_callback( R R
R R R& ( R R R R R R t rtypet rtype_cb( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt run_precallback_validatorsc s c G@ s; | d } | t t j p | d | d j o t St S( Nis %s.i( R\ Re RU Rf ( R R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyRD l s
(c O@ s | i | o | i i | i i | d | } | i i i } y | i | g \ } } Wn1 t i j
o" | i i d i
| d n X| i i | i i | d | St t | i | | S( NiR i(
RD R t Objectt
parent_objectR R
R R R R R9 R R@ ( R R R R R R; R} ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR r s # "c C@ s; y | t d i } Wn t j
o
| } n X| S( NR ( R R t
IndexError( R t attrt cliname( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt attr_to_cli~ s
c
C@ s | i i i } t d
d d | i i i } d } g } yv | i d | d | d } xS | D]K } | d } y | d d } | i | Wq_ t t f j
o q_ Xq_ WWn t
i j
o g SX| S(
Nt cnt masterst ipat etcs( (&(objectClass=ipaConfigObject)(cn=DNS))R& R' i i ( R[ R\ ( R[ R] ( R[ R^ ( R R
R t DNR t basednt find_entriesR[ RW t KeyErrorR R ( R R R' t ldap_filtert dns_masterst entriest entryt master_dnt master( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt get_dns_masters s"
c @ s t f d d D o d St } xW i D]I } | | i j o3 | i | i o! | p | o t } Pq~ q5 q5 W| p t i | n d S( Nc 3@ s x | ] } | j Vq Wd S( N( ( R t k( R ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys s R t addattrR t rename( s setattrRk s delattrs rename( RK Rf R R R RU R t OptionError( R R t
no_option_msgt allow_empty_attrst has_optionsRX ( ( R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt has_cli_options s
"
c @ s t f d | i D S( Nc 3@ sK xD | ]= \ } } | i j o! i | i o | | f Vq q Wd S( N( R R ( R RX R ( R ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys s ( RA t iteritems( R R ( ( R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt get_record_entry_attrs s c
K@ s3 | i d t o x| i D]} y | i | } Wn t j
o
q n Xt | t p q n | i } x | | D] } h t | i d 6| d 6} | i
| } | d j o q~ n x< t | D]. \ } }
|
d j o |
| | | i
s R R ( s dnsrecord_parts dnsrecord_extraN( R RK R& R Rb t AttributeError( R R t rrparam( ( Ru s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt get_rrparam_from_part s
c c@ s g } x | D]w } | i | } | d j o q
n | o d | i | i j o q
n | i | j o | i | i | Vq
q
Wd S( s
Iterates through all DNSRecord instances that has at least one of its
parts or extra options in given dictionary. It returns the DNSRecord
instance only for the first occurence of part/extra option.
:param kw Dictionary with DNS record parts or extra options
:param skip_extra Skip DNS record extra options, yield only DNS records
with a real record part
R N( R| R& R R= R R[ ( R R t
skip_extrat processedR R{ ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt iterate_rrparams_by_parts s
c @ s t f d D } | i f d | D y | i d Wn t j
o
t } n Xt } | i d | o t n t } | o) | o" t i d d d t d n d S( Nc 3@ s5 x. | ]' } | t j o | o | Vq q Wd S( N( R ( R RX ( R ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys s c 3@ s* x# | ] } | j o | Vq q Wd S( N( ( R RX ( R ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys s t cnamerecordR R R sH CNAME record is not allowed to coexist with any other records except PTR(
R: R= t removeRb Rf RU t discardR R R ( R t old_entryR t attrst
rec_has_cnamet rec_has_other_types( ( R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt check_record_type_collisions s
(* R R R RV R R R R R R R R R R RU t rdn_is_primary_keyRi R R
Rl R R R t _dns_record_optionsR R t structured_flagRE RG RQ RT RD R RZ Ri Rf Rq Rs Ry R| R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR@ sV
# R c
B@ s e Z e d Z d Z e i e d d e d d d d g d e d e i f Z d
Z
d Z d Z d
Z
d Z RS( s Add new DNS resource record.sk No options to add a specific record provided.
Command help may be consulted for all supported record types.R Ri R R= R t no_outputR s; force NS record creation even if its hostname is not in DNSc O@ s/ | i i | | i t t | i | | S( N( R Rq Rn R R R ( R R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s c C@ s- y| | i i | | i h } xH | i i | d t D]. } | i | i | d t } | i | q8 W| i | d SWn t i
j
o n X| d t j o d i t
} n4 t | d o d i t } n d i t } | i i i t d | i i i t d | t } x | p | i i i t d } | d j o d SyU d | i } | i | } t | t p
t n | i p
t n WnH t t f j
o6 d i t }
| i i i t d
|
q+n Xt } q+W| i | i } | i | d S( NR} R R u , t dnszoneidnsnameu7 Please choose a type of DNS resource record to be addedu4 The most common types for this type of zone are: %s
u DNS resource record types %srecordu3 Invalid or unsupported type. Allowed values are: %s( R Rq Rn R RU R R
Rf R= R Rm Re R7 t _zone_top_record_typesR t _rev_top_record_typest _top_record_typesR t print_plainR R R& R R R R R$ R Rb t _dns_supported_record_typesR ( R R t new_kwR{ R t common_typest okR R Ru t all_types( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt interactive_prompt_callback sP
c O@ sg g } g } xj| D]b} y | i | }
Wn t j
o
q n X| i i | } | d j o q n d |
i j o | i | j o q n | i | j oI t i d |
i p |
i d t
d t d | i p | i n | i | } | i
| g }
|
| | i <| i | i q n d |
i j o7 t |
t o | | o q n | i | i q q W| i i | | | | x\ | D]T } y | i | }
Wn t j
o
qn Xt |
t p qn | i | qWt t | } xT | D]L } y | i | }
Wn t j
o
q
n X|
i | | | | | | q
Wt t d | y( | i | t d | i i \ } } Wn t i j
o n Xx | D] } | t j o qn | | d j o g | | Raw value of a DNS record was already set by "%(name)s" optionR t dnsrecord_precallback_attrsR ( R Rb R R| R& R= R R R R R RA R R R[ R R RT R R R: R
R R R R t normalize_dnR R R R ( R R R R R
R R t precallback_attrst processed_attrsR Ru R{ R Rw RX R; R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR V s
$
*c
O@ su | i d j o[ t | t i oD | i i } | d } | i i | d } | i | | | d Sn | d S( Nt add_entryi i ( t func_nameR R R R R Rs R/ (
R R R R t call_funct call_argst call_kwargsR R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt exc_callback s
c O@ s x@ t t d g D], } | i | } | i | | | | | q W| i i | o t g | | i i i c 3@ s7 x0 | ]) \ } } | d j o | n | Vq Wd S( N( R& ( R R R ( t old_parts( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys
s (! R R RD R R R R RU R Rf R& R R R R R R RT R R R R R9 R R% Ri t AttrValueNotFoundR R R R R: R ( R R R R R
R R t
updated_attrsRu R t old_valueR; R RX t old_dnsvaluet new_partst attr_namet modified_partst new_dnsvalue( ( R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR sR #
&c O@ s t t | i | | } | i i | p | i d } | d j o | d | f } n | i i | | } | i i } | i | t
d | i i \ } } t } x$ | D] }
| |
o t
} Pq q W| o | i i i | Sn | S( NRl iR ( R R R0 R RD R R& R R R R R RU Rf t methodst delentry( R R R R Rl R R R; R t del_allRX ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR0
s&
c O@ sD | i i | o t g | | i i i R R ub %(count)d %(type)s record skipped. Only one value per DNS record type can be modified at one time.uc %(count)d %(type)s records skipped. Only one value per DNS record type can be modified at one time.i R| R/ ( R Rq Rn RU R Rm R R R R
R R R R Rb R R R[ R7 R Ri R R t prompt_yesnoRA Rf R R= R R R ( R R R R t rec_typet rec_typest
record_paramsRX Ru t rec_type_contentt
rec_valuest rec_valuet mod_valueR ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR 4
sP "2
$
+
&( R R R R Rn R R R@ R R R R0 R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s
< t dnsrecord_delentryc B@ s e Z d Z e d Z e Z RS( s"
Delete DNS record entry.
s Deleted record "%(value)s"( R R R R R3 RU t NO_CLI( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR k
s t
dnsrecord_delc B@ s} e Z e d Z e d Z e d d e d e d e i f Z d Z
d Z d Z d Z
d
Z d Z RS( s Delete DNS resource record.s Neither --del-all nor options to delete a specific record provided.
Command help may be consulted for all supported record types.R R Ri s Delete all associated recordsc #@ s x t t | i D]n t f d d D o q n@ i d j o q n) t t o i d d Vq n Vq Wd S( Nc 3@ s" x | ] } | i j Vq Wd S( N( R= ( R R ( R ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pys
s R R Rl R ( s dnsrecord_parts dnsrecord_extra( s rename( R R t get_optionsRK R R R t cloneR& ( R ( ( R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR
s c
O@ s y( | i | t d | i i \ } } Wn& t i j
o | i i | n Xx | i D] } | t j o q^ n t | | t t
f p | | g }
n | | }
x |
D] } y | | i | Wq t t
f j
oY y* | i | } t | i p | i }
Wn
| }
n Xt i d |
d | q Xq Wt
t | | | | R ( R R R R R R R9 R R R R R Rb R$ R R% Ri R R R: Rf RD RU R R ( R R R R R
R R R; R RX R R Ru R R t record_found( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR
sH
! c O@ s | i d t oM | i i | o& t i d d d t d t n | i i i | St
t | i | | } t
t d t o( | i i | o | i i i | S| S( NR R R s" Zone record '%s' cannot be deleted( R Rf R RD R R R Re R R R R R0 R R ( R R R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR0
s c O@ sD | i i | o t g | | i i i ( R Rf R Rq Rn R Rm R R R R
R R R R RU R Rb R R R[ R7 R Ri RA R ( R R R R R R t user_del_allt present_paramsRX Ru R t deleted_valuesR t user_del_value( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR
sP "2!
$ "
( R R R R Rn R Rf R@ R R R R R0 R R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR u
s
- R c B@ s0 e Z e d Z e i e i f Z d Z RS( s Display DNS resource.c O@ sD | i i | o t g | | i i i * s R R R ( s dnsrecord_parts dnsrecord_extra( R Ry R RK R R R R& ( R ( ( R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR ( s c O@ s | | | i f S( N( t
SCOPE_SUBTREE( R R R& R
R' R( R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR 2 s c O@ s | o | i i | i i } | i | d } | d d | j o t g | d d | i i (
t findR R R R R R R RA RU ( R R R t query( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR0 P s
2
( R R R R R R1 R2 R3 R
t
takes_argsR0 ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR D s t dns_is_enabledc B@ sG e Z d Z e Z e i Z e d d d e i
i Z d Z
d Z RS(
sC
Checks if any of the servers has the DNS service enabled.
R[ R\ R] R^ s( (&(objectClass=ipaConfigObject)(cn=DNS))c O@ sy | i i i } t } y9 | i d | i d | i } t | o
t } n Wn t j
o } n Xt
d | d d S( NR& R' R R> u ( R R
R Rf Ra R& R' R RU R RA ( R R R R t dns_enabledt entR) ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR0 j s
( s cns masters( s cns ipa( s cns etc( R R R RU R R R1 R2 R_ R R R` R' R& R0 ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR ` s t dnsconfigc
B@ s e Z d Z e d Z d d d d g Z e d Z e d Z e d e d d d
e d d e d
d e
e d d d d
e d d e d d d$ e d d d d
e d d e d e
d d d d
e d d e d d d f Z d! Z d" Z d# Z RS(% s)
DNS global configuration object
s DNS configuration optionsR R t idnsallowsyncptrt idnszonerefreshs DNS Global Configurations idnsforwarders*R Ro Ri s Global forwardersR s} A list of global forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT"R s idnsforwardpolicy?R s Forward policysT Global forwarding policy. Set to "none" to disable any configured global forwarders.R u onlyu firstu nones idnsallowsyncptr?R s Allow PTR syncsD Allow synchronization of forward (A, AAAA) and reverse (PTR) recordss idnszonerefresh?t zone_refreshs Zone refresh intervalsF An interval between regular polls of the name server for new DNS zonesR' i c O@ s
t i i S( N( R R R ( R R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s c C@ s+ | i | i d d | i \ } } | S( NR ( R R R& R ( R R R Rf ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt
get_dnsconfig s c @ s> t f d | i D p t t d d s s! Global DNS configuration is emptyt summary( RK R R% R ( R R ( ( R s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt postprocess_result s ( u onlyu firstu none( R R R R R R Ri R R
Rs RU R R R R R R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR z s: t
dnsconfig_modc B@ s e Z e d Z d Z RS( s Modify global DNS configuration.c O@ s/ t t | i | | } | i i | | S( N( R R R0 R R ( R R R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR0 s ( R R R R R0 ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s t dnsconfig_showc B@ s e Z e d Z d Z RS( s* Show the current global DNS configuration.c O@ s/ t t | i | | } | i i | | S( N( R R R0 R R ( R R R R ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR0 s ( R R R R R0 ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyR s ( t
__future__R R/ R, R_ t ipalib.requestR t ipalibR R R R t ipalib.parametersR R R R R
R R t ipalib.plugins.baseldapR R t ipalib.utilR R R R R R R R R R R t ipapython.ipautilR R R R R Re R R R R t tR\ R R R R* R- R< R& RD RE RF RI RX Ra Rf Rg Rh Rl Rs Ru Rv Rx R R R RU R R R R R R R# R$ R+ R- R4 R6 R8 R: R> R@ RE RG RM RO RU Rs Rt Ru R| R~ R R R R R R R R R R R R R R R R R R R R R R R R t
LDAPObjectR t registerR R t
LDAPDeleteR R R R+ R R, R t LDAPQueryR- R4 R5 R? R@ R R R R R Ry R R R R R ( ( ( s6 /usr/lib/python2.6/site-packages/ipalib/plugins/dns.pyt sX 4
L 1 "
"& *
| % -
I
+
"
!
7