[SSSD-users] 1.11.5 ddns failure on Ubuntu 14.04 [SOLVED]]

Longina Przybyszewska longina at sdu.dk
Thu Jun 19 12:32:49 UTC 2014


-----Original Message-----
From: sssd-users-bounces at lists.fedorahosted.org [mailto:sssd-users-bounces at lists.fedorahosted.org] On Behalf Of steve
Sent: 19. juni 2014 13:44
To: sssd-users at lists.fedorahosted.org
Subject: Re: [SSSD-users] 1.11.5 ddns failure on Ubuntu 14.04 [SOLVED]]

On Thu, 2014-06-19 at 10:27 +0000, Longina Przybyszewska wrote:
> I hit the same problem "ddns failure" with desktop client Ubuntu 14.04.
> 
> Following discussion, my setup seems to be correct, but host record disappeared from DNS and can't be updated.
> After joining with 'realm' DNS A record was correct set up.  
> I work on laptop which I use to suspend overnight.
> 
> Debug output:
> 
> root at skywalker:/home-local/longinap# cat /etc/hostnames skywalker
> 
> root at skywalker:/home-local/longinap# cat /etc/hosts
> 127.0.0.1	localhost
> 127.0.1.1	skywalker.domain.org skywalker
> 10.144.4.254	zeta.domain.org zeta

127.0.0.1 skywalker.domain.ord skywalker localhost remove everything else


> ----------------------------
> root at skywalker:/home-local/longinap# hostname -s skywalker
> 
> root at skywalker:/home-local/longinap# hostname -f skywalker.domain.org
> 
> root at skywalker:/home-local/longinap# dnsdomainname domain.org
> 
hostname -d?

> root at skywalker:/home-local/longinap# cat /etc/nsswitch.conf # 
> /etc/nsswitch.conf # # Example configuration of GNU Name Service 
> Switch functionality.
> # If you have the `glibc-doc-reference' and `info' packages installed, try:
> # `info libc "Name Service Switch"' for information about this file.
> 
> passwd:         compat sss
> group:          compat sss
> shadow:         compat
> 
> #hosts:          files mdns4_minimal [NOTFOUND=return] dns
> hosts:		 files dns myhostname
lose the myhostname

> networks:       files
> protocols:      db files
> services:       db files
> ethers:         db files
> rpc:            db files
> 
> netgroup:       nis sss
> sudoers:        files sss
> ---------------------------------
> longinap at skywalker:~$ host skywalker.domain.org Host 
> skywalker.domain.org not found: 3(NXDOMAIN)
> 
> ---------------/var/log/sssd...----------------------
>  [sssd[be[domain.org]]] [sdap_dyndns_update_done] (0x0080): nsupdate 
> failed, retrying with server name  [sssd[be[domain.org]]] 
> [nsupdate_msg_create_common] (0x0200): Creating update message for 
> server [nat-vdc0a.domain.org] and realm [DOMAIN.ORG] . 
> [sssd[be[domain.org]]] [be_nsupdate_create_fwd_msg] (0x0400):  -- 
> Begin nsupdate message -- server nat-vdc0a.domain.org realm DOMAIN.ORG 
> update delete skywalker. in A send update delete skywalker. in AAAA 
> send update add skywalker. 3600 in A 10.80.8.91 send  
> [sssd[be[domain.org]]] [be_nsupdate_create_fwd_msg] (0x0400):  -- End 
> nsupdate message --  [sssd[be[domain.org]]] [child_handler_setup] 
> (0x2000): Setting up signal handler up for pid [5338]  
> [sssd[be[domain.org]]] [child_handler_setup] (0x2000): Signal handler set up for pid [5338]  [sssd[be[domain.org]]] [write_pipe_handler] (0x0400): All data has been sent!
>  [sssd[be[domain.org]]] [be_nsupdate_args] (0x0200):  
> [sssd[be[domain.org]]] [nsupdate_child_stdin_done] (0x1000): nsupdate 
> auth type: GSS-TSIG Sending nsupdate data complete
> 
>  [sssd[be[domain.org]]] [sbus_dispatch] (0x4000): dbus conn: 0x1cbdca0  
> [sssd[be[domain.org]]] [sbus_dispatch] (0x4000): Dispatching.
>  [sssd[be[domain.org]]] [sbus_message_handler] (0x4000): Received SBUS 
> method [ping]  [sssd[be[domain.org]]] [nsupdate_child_timeout] 
> (0x0020): Timeout reached for dynamic DNS update  
> [sssd[be[domain.org]]] [be_nsupdate_done] (0x0040): nsupdate child 
> execution failed [1432158229]: Dynamic DNS update timed out  
> [sssd[be[domain.org]]] [sdap_id_op_destroy] (0x4000): releasing 
> operation connection  [sssd[be[domain.org]]] [ad_dyndns_sdap_update_done] (0x0040): Dynamic DNS update failed [1432158229]: Dynamic DNS update timed out  [sssd[be[domain.org]]] [ad_dyndns_nsupdate_done] (0x0040): Updating DNS entry failed [1432158229]: Dynamic DNS update timed out  [sssd[be[domain.org]]] [child_sig_handler] (0x1000): Waiting for child [5338].
>  [sssd[be[domain.org]]] [child_sig_handler] (0x0020): child [5338] was terminated by signal [9].
> 
> Best,
> Longina
> 
We need at least a d7 log and your sssd.conf Do you have the machine$ key available to sssd on this client?

This is part of d9 log, do you need whole initialization after start?
Maybe machine$ is a problem:
With realm I get following keytab:
Keytab name: FILE:/etc/krb5.keytab
KVNO Timestamp           Principal
---- ------------------- ------------------------------------------------------
   2 05/19/2014 10:36:55 host/skywalker.domain.org at DOMAIN.ORG
   2 05/19/2014 10:36:55 host/skywalker.domain.org at DOMAIN.ORG
   2 05/19/2014 10:36:55 host/skywalker.domain.org at DOMAIN.ORG
   2 05/19/2014 10:36:55 host/skywalker.domain.org at DOMAIN.ORG
   2 05/19/2014 10:36:55 host/skywalker.domain.org at DOMAIN.ORG
   2 05/19/2014 10:36:55 host/SKYWALKER at DOMAIN.ORG
   2 05/19/2014 10:36:55 host/SKYWALKER at DOMAIN.ORG
   2 05/19/2014 10:36:55 host/SKYWALKER at DOMAIN.ORG
   2 05/19/2014 10:36:55 host/SKYWALKER at DOMAIN.ORG
   2 05/19/2014 10:36:55 host/SKYWALKER at DOMAIN.ORG
   2 05/19/2014 10:36:55 SKYWALKER$@DOMAIN.ORG
   2 05/19/2014 10:36:55 SKYWALKER$@DOMAIN.ORG
   2 05/19/2014 10:36:55 SKYWALKER$@DOMAIN.ORG
   2 05/19/2014 10:36:55 SKYWALKER$@DOMAIN.ORG
   2 05/19/2014 10:36:55 SKYWALKER$@DOMAIN.ORG

root at skywalker:~# kinit -k skywalker$\@DOMAIN.ORG
kinit: Keytab contains no suitable keys for skywalker$@DOMAIN.ORG while getting initial credentials
root at skywalker:~# kinit -k SKYWALKER$\@DOMAIN.ORG

best,
Longina

HTH
Steve


_______________________________________________
sssd-users mailing list
sssd-users at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users


More information about the sssd-users mailing list