Imported Upstream version 4.0.5

install/share/bind.named.conf.template

@@ -3,24 +3,21 @@ options {
 	listen-on-v6 {any;};
 
 	// Put files that named is allowed to write in the data/ directory:
-	directory "$NAMED_VAR_DIR"; // the default
+	directory "/var/named"; // the default
 	dump-file		"data/cache_dump.db";
 	statistics-file		"data/named_stats.txt";
 	memstatistics-file	"data/named_mem_stats.txt";
 
+	forward first;
+	forwarders {$FORWARDERS};
+
 	// Any host is permitted to issue recursive queries
 	allow-recursion { any; };
 
-	tkey-gssapi-keytab "$NAMED_KEYTAB";
-	pid-file "$NAMED_PID";
+	tkey-gssapi-keytab "/etc/named.keytab";
+	pid-file "/run/named/named.pid";
 
 	dnssec-enable yes;
-	dnssec-validation yes;
-
-	/* Path to ISC DLV key */
-	bindkeys-file "$BINDKEYS_FILE";
-
-	managed-keys-directory "$MANAGED_KEYS_DIR";
 };
 
 /* If you want to enable debugging, eg. using the 'rndc trace' command,
@@ -40,18 +37,15 @@ zone "." IN {
 	file "named.ca";
 };
 
-include "$RFC1912_ZONES";
-include "$ROOT_KEY";
+include "/etc/named.rfc1912.zones";
 
-/* WARNING: This part of the config file is IPA-managed.
- * Modifications may break IPA setup or upgrades.
- */
-dyndb "ipa" "$BIND_LDAP_SO" {
-	uri "ldapi://%2fvar%2frun%2fslapd-$SERVER_ID.socket";
-	base "cn=dns, $SUFFIX";
-	server_id "$FQDN";
-	auth_method "sasl";
-	sasl_mech "GSSAPI";
-	sasl_user "DNS/$FQDN";
+dynamic-db "ipa" {
+	library "ldap.so";
+	arg "uri ldapi://%2fvar%2frun%2fslapd-$SERVER_ID.socket";
+	arg "base cn=dns, $SUFFIX";
+	arg "fake_mname $FQDN.";
+	arg "auth_method sasl";
+	arg "sasl_mech GSSAPI";
+	arg "sasl_user DNS/$FQDN";
+	arg "serial_autoincrement yes";
 };
-/* End of IPA-managed part. */