URL:
https://github.com/SSSD/sssd/pull/5283
Title: #5283: Add dyndns_auth_ptr support
sumit-bose commented:
"""
Hi,
after some reading I tested this patch with the bind update policy `grant * tcp-self *
PTR;` for the reverse zone. This allows a client with a matching IP address to update its
own record without any special TSIG key. But so far I was not able to reject all other
types of updates so in my test environment gss-tsig for the reverse zone worked as well,
but by checking the logs on the client and server side I could see that gss-tsig was only
used to update the entry for the forward zone while no keys where used to update the
reverse zone.
Al least in my test setup I had to add
dyndns_force_tcp = True
dyndns_server = ipaserver75.rhel75.devel
besides `dyndns_auth_ptr = none` because the version of `nsupdate` I used was not able to
automatically switch to TCP (required by bind to allow the update) and also didn't
pick the right DNS server for the update of the reverse zone.
Nevertheless, all tests were working as expected, so ACK.
Thanks for your patience.
bye,
Sumit
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5283#issuecomment-699824497