On 05/04/2010 02:27 PM, Sumit Bose wrote:
On Tue, May 04, 2010 at 01:01:37PM -0400, Stephen Gallagher wrote:
> On 05/04/2010 08:29 AM, Stephen Gallagher wrote:
>>>
>>
>> Thanks for the review. Updated patch coming soon.
>>
>
> Updated patch should address both Sumit's and Jakub's concerns.
There is a typo in SSSDConfig.py:
+ 'ipa_dyndns_update' : _("Whether to automatically update the
client's DNS entry in FreeIPA"),
+ 'ipa_dyndns_update' : _("The interface whose IP should be used for
dynamic DNS updates"),
Whoops, I'll fix that.
And I see error messages from nsupdate like 'Check your Kerberos
ticket,
it may have expired.'. Maybe you should catch stdout and stderr from
nsupdate child.
You see them where? Those shouldn't appear if you're running daemonized.
How does nsupdate find the ccache file? I think you may need to set
KRB5CCNAME.
That should already be in the environment, because the IPA backend is
already kinited with the host keytab. It seemed to work for me on my
test VMs.
bye,
Sumit
--
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/