[SSSD] [PATCH] Add dynamic DNS updates to FreeIPA

Stephen Gallagher sgallagh at redhat.com
Tue May 4 18:33:36 UTC 2010


On 05/04/2010 02:27 PM, Sumit Bose wrote:
> On Tue, May 04, 2010 at 01:01:37PM -0400, Stephen Gallagher wrote:
>> On 05/04/2010 08:29 AM, Stephen Gallagher wrote:
>>>>
>>>
>>> Thanks for the review. Updated patch coming soon.
>>>
>>
>> Updated patch should address both Sumit's and Jakub's concerns.
>
> There is a typo in SSSDConfig.py:
>
> +    'ipa_dyndns_update' : _("Whether to automatically update the
> client's DNS entry in FreeIPA"),
> +    'ipa_dyndns_update' : _("The interface whose IP should be used for
> dynamic DNS updates"),
>

Whoops, I'll fix that.

> And I see error messages from nsupdate like 'Check your Kerberos ticket,
> it may have expired.'. Maybe you should catch stdout and stderr from
> nsupdate child.
>

You see them where? Those shouldn't appear if you're running daemonized.

> How does nsupdate find the ccache file? I think you may need to set
> KRB5CCNAME.

That should already be in the environment, because the IPA backend is 
already kinited with the host keytab. It seemed to work for me on my 
test VMs.

>
> bye,
> Sumit

-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/



More information about the sssd-devel mailing list