On 05/04/2010 02:33 PM, Stephen Gallagher wrote:
On 05/04/2010 02:27 PM, Sumit Bose wrote:
> On Tue, May 04, 2010 at 01:01:37PM -0400, Stephen Gallagher wrote:
>> On 05/04/2010 08:29 AM, Stephen Gallagher wrote:
>>>>
>>>
>>> Thanks for the review. Updated patch coming soon.
>>>
>>
>> Updated patch should address both Sumit's and Jakub's concerns.
>
> There is a typo in SSSDConfig.py:
>
> + 'ipa_dyndns_update' : _("Whether to automatically update the
> client's DNS entry in FreeIPA"),
> + 'ipa_dyndns_update' : _("The interface whose IP should be used for
> dynamic DNS updates"),
>
Whoops, I'll fix that.
Fixed.
> And I see error messages from nsupdate like 'Check your Kerberos ticket,
> it may have expired.'. Maybe you should catch stdout and stderr from
> nsupdate child.
>
You see them where? Those shouldn't appear if you're running daemonized.
You will see them if you're running SSSD in -d, but they're suppressed
when running daemonized. I just tested this. I think that's probably fine.
> How does nsupdate find the ccache file? I think you may need to
set
> KRB5CCNAME.
That should already be in the environment, because the IPA backend
is
already kinited with the host keytab. It seemed to work for me on my
test VMs.
Just retested as well. It's getting the ccache from the ID provider.
New patch attached.
--
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/