From d4cd737c9f5185c462a7d5f6bcb3fe7b1f5732c6 Mon Sep 17 00:00:00 2001
From: Adam Williamson <awilliam@redhat.com>
Date: Fri, 19 Aug 2022 00:18:00 -0400
Subject: [PATCH] Disable dnssec validation for FreeIPA replica server too

Signed-off-by: Adam Williamson <awilliam@redhat.com>
---
 tests/realmd_join_sssd.pm | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/realmd_join_sssd.pm b/tests/realmd_join_sssd.pm
index 911a03f9..5e1ab913 100644
--- a/tests/realmd_join_sssd.pm
+++ b/tests/realmd_join_sssd.pm
@@ -56,6 +56,8 @@ sub run {
         # deploy as a replica
         my ($ip, $hostname) = split(/ /, get_var("POST_STATIC"));
         my $args = "--ip-address=$ip --setup-dns --auto-forwarders --setup-ca --allow-zone-overlap -U --principal admin --admin-password monkeys123";
+        my $relnum = get_release_number;
+        $args .= ' --no-dnssec-validation' if ($relnum > 37);
         assert_script_run "ipa-replica-install $args", 1500;
 
         # enable and start the systemd service