[SSSD-users] SSSD and Dynamic DNS - clarification

Jakub Hrozek jhrozek at redhat.com
Tue Jun 23 07:52:09 UTC 2015


On Mon, Jun 22, 2015 at 03:01:33PM -0400, Frank Pikelner wrote:
> Hello,
> 
> In my testing it would appear for Dynamic DNS to work (update DNS A and PTR
> records), the Linux client hostsname needs to be FQDN (client123.domain.com)
> defined as one of the hostnames in /etc/hosts for the 127.0.0.1 IP as:
> 
> [/etc/hosts]
> 
> 127.0.0.1      client123.domain.com     client123    localhost.local
>  localhost
> 172.16.5.10   client123.domain.com     client123
> 
> 
> If I have something like, dynamic DNS does not appear to work:
> 
> [/etc/hosts]
> 
> 127.0.0.1      localhost.local localhost
> 172.16.5.10   client123.domain.com     client123
> 
> 
> The second /etc/hosts file should be correct but dynamic DNS is not
> working. Is there something in the implementation that requires the first
> case, or should just the order of the /etc/hosts entries modified so that
> the localhost appears second in the list?

I think this is more of a SASL or kerberos issue that requires the
forward and reverse records to match.

But yes, in general with Kerberos, especially not the most recent
versions, you want the DNS records to match in both directions.


More information about the sssd-users mailing list