[Freeipa-devel] [freeipa PR#4909][opened] Add unauthenticated nsupdate

[fcami]

   URL: https://github.com/freeipa/freeipa/pull/4909
Author: fcami
 Title: #4909: Add unauthenticated nsupdate
Action: opened

PR body:
"""
    ipa-client-install: update sssd.conf if nsupdate requires -g
    
    If dynamic DNS updates are selected, sssd will use GSS-TSIG
    by default for nsupdate.
    When ipa-client-install notices that plain nsupdate is required,
    switch sssd to use no authentication for dynamic updates too.
    
    Fixes: https://pagure.io/freeipa/issue/8402

+

    ipa-client-install: invoke nsupdate twice (GSS-TSIG, plain)
    
    ipa-client-install invokes nsupdate with GSS-TSIG at client
    enrollment time. If that fails, no retry is done.
    Change that behavior to try again without GSS-TSIG.
    
    Fixes: https://pagure.io/freeipa/issue/8402


####
This is purely WIP:
- it needs a proper test
- there are more nsupdate calls that should be adapted.
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4909/head:pr4909
git checkout pr4909