[SSSD] [Freeipa-users] IPA/Kerberos5 and Upper Case/Lower-case Hostnames

Jakub Hrozek jhrozek at redhat.com
Mon Jan 19 14:22:18 UTC 2015


On Mon, Jan 19, 2015 at 07:38:54AM -0500, Dmitri Pal wrote:
> On 01/18/2015 03:24 AM, Traiano Welcome wrote:
> >Hi Dmitri
> >
> >
> >On Tue, Dec 30, 2014 at 12:17 AM, Dmitri Pal <dpal at redhat.com> wrote:
> >>On 12/24/2014 01:04 AM, Traiano Welcome wrote:
> >>>Hi List
> >>>
> >>>I have a large number of legacy hosts with upper-case host names, that
> >>>I'd like to configure as IPA clients. However ipa client refuses to
> >>>accept upper case hostnames during configuration time.
> >>>
> >>>I think this derives from the fact that the kerberos5 database stores
> >>>host names in a case sensitive way and requires that the DNS hostname
> >>>matches the server hostname case.
> >>>
> >>>My question is: Is it mandatory that the hostname be lower-cased, or
> >>>is there a safe workaround that will allow IPA client to work with
> >>>hosts that have upper case host names ?
> >>>
> >>>Thanks in advance!
> >>>Traiano
> >>>
> >>See man sssd-ipa
> >>
> >>        ipa_hostname (string)
> >>            Optional. May be set on machines where the hostname(5) does not
> >>reflect the fully qualified name used in the IPA domain to identify this
> >>            host.
> >>
> >>AFAIR you use this setting for the cases when you want the actual machine
> >>name be different than the one IPA has.
> >
> >
> >It looks like I would have to add this parameter in the sssd.conf
> >before running the ipa client configuration. In that case, would the
> >configurator not overwrite this parameter ?
> >Or is there some way to provide this option to  ipa-client-install initially?
> 
> AFAIR then you have to configure it manually.
> But this question belongs more to SSSD list so I am moving it there.
> 
> Also I think the option is to change the name of the host, enroll
> automatically, then change it back and update the configuration.
> But I would prefer SSSD gurus to confirm that.

Have you tried the --hostname option of ipa-client-install? From the
help output:

--hostname=HOSTNAME
                    The hostname of this machine (FQDN). If specified, the
                    hostname will be set and the system configuration will
                    be updated to persist over reboot. By default a
                    nodename result from uname(2) is used.



More information about the sssd-devel mailing list