[SSSD] [PATCH] Add dynamic DNS updates to FreeIPA

Stephen Gallagher sgallagh at redhat.com
Tue May 4 18:54:26 UTC 2010


On 05/04/2010 02:33 PM, Stephen Gallagher wrote:
> On 05/04/2010 02:27 PM, Sumit Bose wrote:
>> On Tue, May 04, 2010 at 01:01:37PM -0400, Stephen Gallagher wrote:
>>> On 05/04/2010 08:29 AM, Stephen Gallagher wrote:
>>>>>
>>>>
>>>> Thanks for the review. Updated patch coming soon.
>>>>
>>>
>>> Updated patch should address both Sumit's and Jakub's concerns.
>>
>> There is a typo in SSSDConfig.py:
>>
>> +    'ipa_dyndns_update' : _("Whether to automatically update the
>> client's DNS entry in FreeIPA"),
>> +    'ipa_dyndns_update' : _("The interface whose IP should be used for
>> dynamic DNS updates"),
>>
>
> Whoops, I'll fix that.

Fixed.

>
>> And I see error messages from nsupdate like 'Check your Kerberos ticket,
>> it may have expired.'. Maybe you should catch stdout and stderr from
>> nsupdate child.
>>
>
> You see them where? Those shouldn't appear if you're running daemonized.
>

You will see them if you're running SSSD in -d, but they're suppressed 
when running daemonized. I just tested this. I think that's probably fine.

>> How does nsupdate find the ccache file? I think you may need to set
>> KRB5CCNAME.

> That should already be in the environment, because the IPA backend is
> already kinited with the host keytab. It seemed to work for me on my
> test VMs.

Just retested as well. It's getting the ccache from the ID provider.



New patch attached.

-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-dynamic-DNS-updates-to-FreeIPA.patch
Type: text/x-patch
Size: 30406 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100504/376efd65/attachment.bin>


More information about the sssd-devel mailing list