#7598 ipa-client-install: autodiscovery must refuse single label domains
Closed: fixed 5 years ago by frenaud. Opened 5 years ago by frenaud.

Ticket was cloned from Red Hat Bugzilla (product Fedora): Bug 1582113

Argument check too strict for --domain and --realm :

# ipa-client-install --unattended --no-nisdomain --no-ntp --no-dns-sshfp
--domain=math --realm=MATH -p xxx -w xxx --hostname=pc-img2.math

says :

ipa-client-install: error: option --domain: single label domains are not
supported

# ipa-client-install --unattended --no-nisdomain --no-ntp --no-dns-sshfp
--domain=math.univ-angers.fr --realm=MATH -p xxx -w xxx --hostname=pc-img2.math

says :

ipa-client-install: error: option --realm: single label realms are not
supported

but :

# ipa-client-install --unattended --no-nisdomain --no-ntp --no-dns-sshfp -p xxx
-w xxx --hostname=pc-img2.math

says :

Discovery was successful!
Client hostname: pc-img2.math
Realm: MATH
DNS Domain: math
IPA Server: netsrv.math
BaseDN: dc=math

and runs successfully.

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1582113

5 years ago

I updated the title to reflect Flo's comment on the BZ and our decision. Auto discovery must also refuse single label domains.

Metadata Update from @frenaud:
- Issue set to the milestone: FreeIPA 4.6.6

5 years ago

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/3021

5 years ago

Metadata Update from @frenaud:
- Issue assigned to frenaud

5 years ago

master:

  • f2826da ipa-client-install: autodiscovery must refuse single-label domains

ipa-4-6:

  • 39d2ae9 ipa-client-install: autodiscovery must refuse single-label domains

ipa-4-7:

  • 4bc8bc2 ipa-client-install: autodiscovery must refuse single-label domains

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

5 years ago

ipa-4-6:

  • 8ae6c1a check for single-label domains only during server install

Login to comment on this ticket.

Metadata