[SSSD] [PATCH] Minor AD dyndns fixes

Jakub Hrozek jhrozek at redhat.com
Sat May 11 19:08:14 UTC 2013


Hi,

the attached small patches fix smallish issues reported by users after
1.10beta1 was released. The biggest change is enabling the updates by
default in the AD provider. They were disabled by default (I guess to
have the same settings in both IPA and AD providers), but in AD it makes
sense to enable the update by default.

[PATCH 1/3] Fix a typo in sssd-ad man page
s/IPA/AD/

[PATCH 2/3] Enable the AD dynamic DNS updates by default
https://fedorahosted.org/sssd/ticket/1915

[PATCH 3/3] man: Clarify that AD dyndns updates are secured using GSS-TSIG
https://fedorahosted.org/sssd/ticket/1910
-------------- next part --------------
>From 6dc08486ecadb963db6658cda38d9bae848a6369 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Thu, 9 May 2013 16:35:22 +0200
Subject: [PATCH 1/3] Fix a typo in sssd-ad man page

s/IPA/AD/
---
 src/man/sssd-ad.5.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index 4dcd552d7f1fe3235af9c582c49c553441a014e9..71e8a2075bc83bc814987f2ca738ddb138c14e5a 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -198,7 +198,7 @@ ldap_id_mapping = False
                             should be used for dynamic DNS updates.
                         </para>
                         <para>
-                            Default: Use the IP address of the IPA LDAP connection
+                            Default: Use the IP address of the AD LDAP connection
                         </para>
                     </listitem>
                 </varlistentry>
-- 
1.8.2.1

-------------- next part --------------
>From c47241061d59a63bde8c38d470b12f2ba29a78c3 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Thu, 9 May 2013 16:41:47 +0200
Subject: [PATCH 2/3] Enable the AD dynamic DNS updates by default

https://fedorahosted.org/sssd/ticket/1915
---
 src/man/sssd-ad.5.xml      | 2 +-
 src/providers/ad/ad_opts.h | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index 71e8a2075bc83bc814987f2ca738ddb138c14e5a..589dfd0b5f7514a8e17c9f04407476ccf7c33e88 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -170,7 +170,7 @@ ldap_id_mapping = False
                             realm must be set properly in /etc/krb5.conf
                         </para>
                         <para>
-                            Default: false
+                            Default: true
                         </para>
                     </listitem>
                 </varlistentry>
diff --git a/src/providers/ad/ad_opts.h b/src/providers/ad/ad_opts.h
index 32bbe3db2f4048056c7e96619eaf53ce22bf52f8..6e9d843c1f0a619fc3da26ae82bb15fe80eb4420 100644
--- a/src/providers/ad/ad_opts.h
+++ b/src/providers/ad/ad_opts.h
@@ -239,7 +239,7 @@ struct sdap_attr_map ad_autofs_entry_map[] = {
 };
 
 struct dp_option ad_dyndns_opts[] = {
-    { "dyndns_update", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
+    { "dyndns_update", DP_OPT_BOOL, BOOL_TRUE, BOOL_FALSE },
     { "dyndns_refresh_interval", DP_OPT_NUMBER, { .number = 86400 }, NULL_NUMBER },
     { "dyndns_iface", DP_OPT_STRING, NULL_STRING, NULL_STRING },
     { "dyndns_ttl", DP_OPT_NUMBER, { .number = 3600 }, NULL_NUMBER },
-- 
1.8.2.1

-------------- next part --------------
>From 8d19d817bac40db8db0006ed0f46b66c0a67f305 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Sat, 11 May 2013 18:46:06 +0200
Subject: [PATCH 3/3] man: Clarify that AD dyndns updates are secured using
 GSS-TSIG

https://fedorahosted.org/sssd/ticket/1910
---
 src/man/sssd-ad.5.xml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index 589dfd0b5f7514a8e17c9f04407476ccf7c33e88..c828ab6c21d361f35d87aff8d617b0ba1f8982b4 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -162,7 +162,10 @@ ldap_id_mapping = False
                         <para>
                             Optional. This option tells SSSD to automatically
                             update the Active Directory DNS server with
-                            the IP address of this client.
+                            the IP address of this client. The update is
+                            secured using GSS-TSIG. As a consequence, the
+                            Active Directory administrator only needs to
+                            allow secure updates for the DNS zone.
                         </para>
                         <para>
                             NOTE: On older systems (such as RHEL 5), for this
-- 
1.8.2.1



More information about the sssd-devel mailing list