Bug 1063286
| Summary: | useDnsLookup flag is ignored at rhevm-manage-domains - krb5.conf file will always contain realms and "domain_realm" section | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Virtualization Manager | Reporter: | rhev-integ |
| Component: | ovirt-engine-config | Assignee: | Yair Zaslavsky <yzaslavs> |
| Status: | CLOSED ERRATA | QA Contact: | Jiri Belka <jbelka> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 3.3.0 | CC: | aberezin, acathrow, akotov, bazulay, gklein, iheim, oourfali, pstehlik, Rhev-m-bugs, yeylon, yzaslavs, zdover |
| Target Milestone: | --- | Keywords: | ZStream |
| Target Release: | 3.3.2 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | infra | ||
| Fixed In Version: | is35 | Doc Type: | Bug Fix |
| Doc Text: |
Previously, the useDnsLookup flag was ignored by rhev-manage-domains when the krb5.conf file contained the [realms] section and the [domain_realm] section and dns_lookup_realm was set to false and dns_lookup_kdc was set to false. This assumed that the KDCS and LDAP servers were co-hosted on the same machine, and that meant that rhevm-manage-domains could not be used to add domains in which the KDCS and the LDAP servers were not co-hosted on the same host. An update makes certain that the useDnsLookup flag is not ignored, and that makes it possible to use rhevm-manage-domains to add domains in which the KDCS and LDAP servers are not co-hosted on the same host.
|
Story Points: | --- |
| Clone Of: | 1062172 | Environment: | |
| Last Closed: | 2014-04-09 17:54:29 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | Infra | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1062172 | ||
| Bug Blocks: | |||
|
Comment 1
Yair Zaslavsky
2014-02-16 07:08:55 UTC
dns query is enabled when using multiple domains...
# cat /etc/ovirt-engine/krb5.conf
[libdefaults]
default_realm = BRQ-IPA.RHEV.LAB.ENG.BRQ.REDHAT.COM
dns_lookup_realm = true
dns_lookup_kdc = true
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = no
default_tkt_enctypes = arcfour-hmac-md5
udp_preference_limit = 1
#realms
[domain_realm]
brq-ipa.rhev.lab.eng.brq.redhat.com = BRQ-IPA.RHEV.LAB.ENG.BRQ.REDHAT.COM
ad-w2k12r2.rhev.lab.eng.brq.redhat.com = AD-W2K12R2.RHEV.LAB.ENG.BRQ.REDHAT.COM
ad-w2k8r2.rhev.lab.eng.brq.redhat.com = AD-W2K8R2.RHEV.LAB.ENG.BRQ.REDHAT.COM
This bug is currently attached to errata RHBA-2014:17286. If this change is not to be documented in the text for this errata please either remove it from the errata, set the requires_doc_text flag to minus (-), or leave a "Doc Text" value of "--no tech note required" if you do not have permission to alter the flag. Otherwise to aid in the development of relevant and accurate release documentation, please fill out the "Doc Text" field above with these four (4) pieces of information: * Cause: What actions or circumstances cause this bug to present. * Consequence: What happens when the bug presents. * Fix: What was done to fix the bug. * Result: What now happens when the actions or circumstances above occur. (NB: this is not the same as 'the bug doesn't present anymore') Once filled out, please set the "Doc Type" field to the appropriate value for the type of change made and submit your edits to the bug. For further details on the Cause, Consequence, Fix, Result format please refer to: https://bugzilla.redhat.com/page.cgi?id=fields.html#cf_release_notes Thanks in advance. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2014-0384.html The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days |