On Fri, Apr 19, 2019 at 4:47 PM Rob Verduijn <rob.verduijn@gmail.com> wrote:
>
> debug level 9 is really verbose, and I'm not sure what I'm looking for
> So far I found this
>
> [ipa_init_dyndns] Dynamic DNS updates are on. Checking for nsupdate...
> [ipa_init_dyndns] (0x0100): nsupdate is available
> [ipa_dyndns_init] (0x0040): Dyndns task can't be started, dyndns_refresh_interval is 0
> [ipa_init_dyndns] (0x0080): Failure setting up automatic DNS update
>
> What causes this ?
There's a timer, I think. What happens if you wait a bit?
Can you compare to another host?
> Rob
>
> Op vr 19 apr. 2019 om 16:27 schreef François Cami <fcami@redhat.com>:
>>
>> Hi,
>>
>> On Fri, Apr 19, 2019 at 4:00 PM Rob Verduijn via FreeIPA-users
>> <freeipa-users@lists.fedorahosted.org> wrote:
>> >
>> > Hello,
>> >
>> > I have this laptop that is an ipa domain member.
>> > And the login/sudo/automount all works fine.
>> > However the dns entries of the laptop are not updated when the laptop starts up and gets a new ipaddress.
>> >
>> > I've looked in several configs and compared to other systems that work but can't seem to find it.
>> >
>> > Anybody got an idea where to look ?
>>
>> Please enable debug mode in sssd.
>> debug_level = 9
>> should be enough, in the domain section of sssd.conf.
>> Restart sssd and then make sure the laptop gets a new address on startup.
>>
>> François
>>
>> > Rob
>> >
>> > my sssd.conf
>> > [domain/example.com]
>> > id_provider = ipa
>> > ipa_server = _srv_, freeipa01.example.com
>> > ipa_domain = example.com
>> > ipa_hostname = laptop.example.com
>> > auth_provider = ipa
>> > chpass_provider = ipa
>> > access_provider = ipa
>> > cache_credentials = True
>> > ldap_tls_cacert = /etc/ipa/ca.crt
>> > dyndns_update = True
>> > dyndns_iface = *
>> > krb5_store_password_if_offline = True
>> > autofs_provider = ipa
>> > ipa_automount_location = laptop
>> > [sssd]
>> > services = nss, pam, ssh, sudo, autofs
>> > domains = example.com
>> > [nss]
>> > homedir_substring = /home
>> > [pam]
>> > [sudo]
>> > [autofs]
>> > [ssh]
>> > [pac]
>> > [ifp]
>> > [secrets]
>> > [session_recording]
>> >
>> >
>> > _______________________________________________
>> > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
>> > To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
>> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> > List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org