<div dir="ltr"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span style="font-family:arial,sans-serif;font-size:13px">Maybe try to use the dyndns_iface option</span></blockquote>
<div>This forced an IPv6 record update :)</div><div><br></div><div>How come this wasn't done automatically, though?</div><div><br></div><div>While entirely possible, it's a bit of a pain to set the interface for all hosts, especially because there is no guarantee that it will be the same interface for every host. If I could get around setting this explicitly, that would be a better option.</div>
<div><br></div><div>Thanks!</div></div><div class="gmail_extra"><br clear="all"><div><div><br></div>-Chris</div>
<br><br><div class="gmail_quote">On Mon, Oct 14, 2013 at 12:46 PM, Sumit Bose <span dir="ltr"><<a href="mailto:sbose@redhat.com" target="_blank">sbose@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On Mon, Oct 14, 2013 at 12:13:22PM -0400, Chris Hartman wrote:<br>
> Hmm. It appears that setting the hostname to the FQDN using the `hostname<br>
> $FQDN` command solves this problem until a reboot. For a permanent<br>
> solution, I'm adding the FQDN to /etc/hostname and ensuring /etc/hosts has<br>
> '127.0.1.1 $HOST $FQDN'.<br>
<br>
</div>as an alternative you can try to use the FQDN in the ad_hostname option<br>
in sssd.conf.<br>
<div class="im"><br>
><br>
> However, I have a followup question. I notice that SSSD is only updating<br>
> IPv4 records. How can I ensure IPv6 updates? Thanks!<br>
<br>
<br>
</div>In general it should. Maybe try to use the dyndns_iface option. Feel<br>
free to send more detailed logs so that I can have a closer look.<br>
<br>
bye,<br>
Sumit<br>
<div class="HOEnZb"><div class="h5"><br>
><br>
><br>
> -Chris<br>
><br>
><br>
> On Mon, Oct 14, 2013 at 11:24 AM, Chris Hartman <<a href="mailto:qrstuv@gmail.com">qrstuv@gmail.com</a>> wrote:<br>
><br>
> > Sumit,<br>
> ><br>
> > Just 'snickers'<br>
> ><br>
> ><br>
> > -Chris<br>
> ><br>
> ><br>
> > On Mon, Oct 14, 2013 at 11:21 AM, Sumit Bose <<a href="mailto:sbose@redhat.com">sbose@redhat.com</a>> wrote:<br>
> ><br>
> >> On Mon, Oct 14, 2013 at 11:10:47AM -0400, Chris Hartman wrote:<br>
> >> > Hi guys,<br>
> >> ><br>
> >> > I've noticed that dynamic DNS updates aren't working with my setup.<br>
> >> Client<br>
> >> > is Ubuntu 12.04 using SSSD 1.11.1. Server 2008 AD on backend.<br>
> >> ><br>
> >> > Here's my config:<br>
> >> > [sssd]<br>
> >> > config_file_version = 2<br>
> >> > debug_level = 0<br>
> >> > reconnection_retries = 3<br>
> >> > sbus_timeout = 30<br>
> >> > services = nss, pam<br>
> >> > domains = DOMAIN<br>
> >> ><br>
> >> > [pam]<br>
> >> > debug_level = 0<br>
> >> ><br>
> >> > [nss]<br>
> >> > debug_level = 10<br>
> >> > filter_users =<br>
> >> ><br>
> >> root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm<br>
> >> > filter_groups =<br>
> >> ><br>
> >> root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm<br>
> >> > reconnection_retries = 3<br>
> >> ><br>
> >> > [domain/DOMAIN]<br>
> >> > debug_level = 10<br>
> >> > ad_domain = DOMAIN.local<br>
> >> > id_provider = ad<br>
> >> > auth_provider = ad<br>
> >> > chpass_provider = ad<br>
> >> > access_provider = ad<br>
> >> > enumerate = true<br>
> >> > cache_credentials = true<br>
> >> > # Will check unixHomeDirectory LDAP attribute for a value first<br>
> >> > fallback_homedir = /home/%u<br>
> >> > ldap_user_home_directory = unixHomeDirectory<br>
> >> > dyndns_update = true<br>
> >> > dyndns_update_ptr = true<br>
> >> > dyndns_refresh_interval = 30<br>
> >> > ldap_schema = ad<br>
> >> > ldap_id_mapping = true<br>
> >> ><br>
> >> > When viewing debug output, I saw this under the domain log:<br>
> >> > (Mon Oct 14 10:33:01 2013) [sssd[be[wysu]]] [be_nsupdate_create_fwd_msg]<br>
> >> > (0x0400): -- Begin nsupdate message --<br>
> >> > server milkdud.DOMAIN.local<br>
> >> > realm DOMAIN.LOCAL<br>
> >> > update delete snickers. in A<br>
> >> > send<br>
> >> > update delete snickers. in AAAA<br>
> >> > send<br>
> >> > update add snickers. 3600 in A 10.11.12.41<br>
> >> > send<br>
> >> ><br>
> >> > When I try to perform this update manually using `nsupdate -g` it will<br>
> >> fail<br>
> >> > with the following error:<br>
> >> > tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor<br>
> >> > code may provide more information, Minor = Server not found in Kerberos<br>
> >> > database.<br>
> >> ><br>
> >> > However, if I replace 'snickers.' with the FQDN 'snickers.DOMAIN.local'<br>
> >> the<br>
> >> > update will happen fine.<br>
> >> ><br>
> >> > I'm assuming this is an SSSD configuration error since the FQDN is not<br>
> >> > being used during the update. Any ideas how to solve this?<br>
> >><br>
> >> Does the hostname command on the shell return just snickers or the FQDN?<br>
> >><br>
> >> bye,<br>
> >> Sumit<br>
> >><br>
> >> ><br>
> >> > Thanks!<br>
> >> ><br>
> >> > -Chris<br>
> >><br>
> >> > _______________________________________________<br>
> >> > sssd-users mailing list<br>
> >> > <a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
> >> > <a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
> >><br>
> >> _______________________________________________<br>
> >> sssd-users mailing list<br>
> >> <a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
> >> <a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
> >><br>
> ><br>
> ><br>
<br>
> _______________________________________________<br>
> sssd-users mailing list<br>
> <a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
> <a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
<br>
_______________________________________________<br>
sssd-users mailing list<br>
<a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
</div></div></blockquote></div><br></div>