On 8/1/19 2:06 PM, Boyd Ako via FreeIPA-users wrote:
Anybody know how to get more log information on what the IPA client
does? I already know about the stuff in /var/log/sssd, but I'm looking for something
in regards to dynamic dns updates failing.
When I ran `ipa-client-install` with the --enable-dns-updates option it kicked out an
error saying it couldn't update the dns record. It doesn't show up in the server;
obviously. I checked the ipaclient-install.log and tried to run the `nsupdate` command
with a recreated command file or what ever. At best I got the following....
What is the client FQDN? Is its domain managed by IPA server?
You can check the zones managed by IPA with
$ kinit admin
$ ipa dnszone-find
If the client's domain is not managed by IPA, IPA server won't accept
the nsupdate command.
The other point to check is that the client's /etc/resolv.conf correctly
points to the the DNS server.
flo
==============================
[root@luna ipa]# klist
Ticket cache: KEYRING:persistent:0:0
Default principal: admin(a)NEVERLAND.DDNS.ME
Valid starting Expires Service principal
08/01/2019 02:04:26 08/02/2019 02:04:20 krbtgt/NEVERLAND.DDNS.ME(a)NEVERLAND.DDNS.ME
[root@luna ipa]# cat /etc/ipa/.dns_update.txt
update delete luna.neverland.ddns.me. IN A
show
send
update delete luna.neverland.ddns.me. IN AAAA
show
send
update add luna.neverland.ddns.me. 1200 IN A 10.0.0.19
show
send
update add luna.neverland.ddns.me. 1200 IN AAAA 2605:e000:1127:713::7
show
send
[root@luna ipa]# /usr/bin/nsupdate -v -g /etc/ipa/.dns_update.txt
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
luna.neverland.ddns.me. 0 ANY A
response to SOA query was unsuccessful
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...