[SSSD] [patch] TTL in SSSD DNS update

Stephen Gallagher sgallagh at redhat.com
Mon Aug 13 13:18:26 UTC 2012


On Mon, 2012-08-13 at 11:44 +0100, James Hogarth wrote:
> Hi,
> 
> As discussed in #SSSD on Friday the TTL used in the nsupdate when SSSD
> carries out a needed update is set quite high (86400 seconds) and is
> not in line with the TTL originally by an IPA client install (1200
> seconds).
> 
> I've filed bug #1476 for this on the SSSD fedorahosted trac instance
> and attached the proposed patch file there too...
> 
> There are two patches - one against master (a git diff) and one
> suitable to adding to the current SRPM provided for SSSD in the centos
> 6.3 repository (so hopefully fine for RHEL in theory)....
> 
> I've tested the one for the SRPM as working so hopefully the same will
> be fine on master... it's just the change of the integer after all...
> 
> This is an initial patch to bring the SSSD nsupdate TTL in line with
> the IPA client install one... (since it's a quick and simple change).
> 
> Over the course of the next couple of weeks I plan to refine this and
> submit a future update to have the value configurable in sssd.conf -
> along with a similar one the freeipa-devel lists for changes that end
> to expose TTL in the IPA UI and have the initial client install with a
> configurable TTL as well...


Nack.

As discussed on IRC, we're going to wait until a patch to make this
option configurable is available.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120813/e6c9dfe1/attachment.sig>


More information about the sssd-devel mailing list