[SSSD] testing dyndns_update
steve
steve at steve-ss.com
Thu May 9 06:34:50 UTC 2013
On 08/05/13 23:53, Lukas Slebodnik wrote:
> On (08/05/13 22:46), steve wrote:
>> Hi
>> We have 1.10.0beta1 on lubuntu 13.04
>>
>> We have added
>> dyndns_update=true
>> dyndns_refresh=1
>> to sssd.conf
>>
>> We expect to see an update request after 1 minute, but nothing
>> happens. Are we correct to expect this behaviour?
>>
>> Cheers,
>> Steve
>
> From manual page "sssd-ad"
>
> dyndns_refresh_interval (integer)
> How often should the back end perform periodic DNS update in
> addition to the automatic update performed when the back end
> goes online. This option is optional and applicable only
> when dyndns_update is true.
>
> Default: 86400 (24 hours)
>
> It is not explicitelly written, but you could noticed,
> that default value is in seconds. (86400 seconds == 24 hours)
>
Hi. Thanks. I changed it to:
dyndns_update=true
dyndns_refresh=60
No DNS request is made. We have a Samba4 dc which accepts dns requests
from the windows clients so it seems to be working. I have set the log
level to 6 but nothing gets logged. I'm looking in:
/usr/local/var/log/sssd, /var/log/sssd
It's starting OK and getent and user logins work fine, just not the dns
update requests.
sudo sssd -i -d3
(Thu May 9 08:25:32 2013) [sssd[be[default]]]
[sssm_simple_access_init] (0x0040): No rules supplied for simple access
provider. Access will be granted for all users.
(Thu May 9 08:25:32 2013) [sssd[be[default]]] [be_process_init]
(0x0080): No SUDO module provided for [default] !!
(Thu May 9 08:25:32 2013) [sssd[be[default]]] [be_process_init]
(0x0020): No selinux module provided for [default] !!
(Thu May 9 08:25:32 2013) [sssd[be[default]]] [be_process_init]
(0x0020): No host info module provided for [default] !!
(Thu May 9 08:25:32 2013) [sssd[be[default]]] [be_process_init]
(0x0020): Subdomains are not supported for [default] !!
Here is our sssd.conf. What are we missing to be able to trigger the dns
update requests?
[sssd]
debug_level = 6
services = nss, pam
config_file_version = 2
domains = default
[nss]
[pam]
[domain/default]
debug_level=6
dyndns_update=true
dyndns_refresh_interval=60
ldap_schema = rfc2307bis
access_provider = simple
enumerate = FALSE
cache_credentials = true
#entry_cache_timeout = 60
id_provider = ldap
auth_provider = krb5
chpass_provider = krb5
krb5_realm = HH3.SITE
krb5_server = hh16.hh3.site
krb5_kpasswd = hh16.hh3.site
ldap_referrals = False
ldap_uri = ldap://hh16.hh3.site
ldap_search_base = dc=hh3,dc=site
#ldap_tls_cacertdir = /usr/local/samba/private/tls
#ldap_id_use_start_tls = true
#entry_negative_timeout = 1
ldap_user_object_class = user
ldap_user_name = samAccountName
ldap_user_uid_number = uidNumber
ldap_user_gid_number = gidNumber
ldap_user_home_directory = unixHomeDirectory
ldap_user_shell = loginShell
ldap_group_object_class = group
ldap_group_search_base = dc=hh3,dc=site
ldap_group_name = cn
ldap_group_member = member
#ldap_default_bind_dn = cn=steve2,cn=Users,dc=dolores,dc=site
#ldap_default_authtok_type = password
#ldap_default_authtok = s2
ldap_sasl_mech = gssapi
ldap_sasl_authid = PINOSO$@HH3.SITE
ldap_krb5_keytab = /etc/krb5.keytab
ldap_krb5_init_creds = true
More information about the sssd-devel
mailing list