On Fri 09 Nov 2012 06:57:25 AM EST, ballock wrote:
Hello,
I stumbled upon a problem that I believe to be a bug, but perhaps I am
wrong.
Basically what happens is that if I have a line in /etc/hosts:
127.0.1.1
machine1.europe.example.com machine1
then I can only log in from
europe.example.com domain.
I reported this as:
https://fedorahosted.org/sssd/ticket/1633
but perhaps this is a 'feature'? That sssd resolves the current
machine domain and only allows to log in from this domain?
I replied in the ticket:
From the SSSD manpage:
{{{
dns_discovery_domain (string)
If service discovery is used in the back end, specifies the domain
part of the service discovery DNS query.
Default: Use the domain part of machine's hostname
}}}
The problem here is that you're relying on SRV records to locate your
KDC, but you aren't telling it which DNS domain to use for this
location. If it's unspecified, we do a local lookup of the machine's
hostname and then use that for the search domain.
Try setting:
{{{
[
domain/europe.example.com]
...
dns_discovery_domain =
europe.example.com
...
[
domain/asia.example.com]
...
dns_discovery_domain =
asia.example.com
...
}}}