#4413 NSEC3PARAM DNS record should be in DNS zone settings
Closed: Fixed None Opened 8 years ago by pspacek.

Currently, WebUI offers NSEC3PARAM under "DNS Resource Records" tab. This record type can be present only at zone apex and nowhere else.

For this reason it should go to DNS zone->"Settings" tab (the situation is the same as e.g. with "SOA serial").

Discussed offline, this needs to be solved in 4.0. Changes that needs to be done:

  • NSEC3 attributeType should be moved to idnsZone, to avoid diverging from bind-dyndb-ldap schema
  • Option will be moved out from dnsrecord- command and moved to dnszone- commands (we can do that, API was not released yet)
  • NSEC3 will be passed only via one option (dnszone- commands do not support the dnsrecord- per-type machinery).


Metadata Update from @pspacek:
- Issue assigned to mbasti
- Issue set to the milestone: FreeIPA 4.0 GA

5 years ago

Login to comment on this ticket.