[SSSD-users] 1.11.5 ddns failure on Ubuntu 14.04[SOLVED]

steve steve at steve-ss.com
Mon Jun 23 11:07:19 UTC 2014

On Mon, 2014-06-23 at 09:09 +0000, Longina Przybyszewska wrote:
> Ok. 
> 2 cases:
> 1. The first server is the  server chosen automatically  by service discovery - obviously doesn't answer.

Narrow it down. Set the primary dns on your client to be a dns server
which you know for certain is handling your ad domain. For now remove
other dns entries and strip sssd of anything apart from ad.

 /etc/hosts       catral.hh3.site catral localhost

search hh3.site

services = nss, pam
config_file_version = 2
domains = hh3.site
id_provider = ad
access_provider = ad
auth_provider = ad
ldap_id_mapping = false

e.g. here is an openSUSE client running 1.11.5 joined to the domain
hh3.site. The DC at is also running bind for this domain.
A session on catral with a common error;)

catral:/home/steve # nsupdate -g
> update delete catral.hh3.site. in A
> send
tkey query failed: GSSAPI error: Major = Unspecified GSS failure.  Minor
code may provide more information, Minor = Ticket expired.
catral:/home/steve # kinit -kt /etc/krb5.keytab CATRAL$
catral:/home/steve # nsupdate -g
> update delete catral.hh3.site. in A
> send
> update add catral.hh3.site. 3600 in A
> send
> quit

catral:/home/steve # nslookup catral
Name:	catral.hh3.site

If you haven't got the dns exactly right, you may need some tweaks in
sssd.conf to get you there:


More information about the sssd-users mailing list