Bug 660323

Summary: Provide an option to specify DNS domain for service discovery
Product: Red Hat Enterprise Linux 6 Reporter: Mike <mrkfact>
Component: sssdAssignee: Stephen Gallagher <sgallagh>
Status: CLOSED ERRATA QA Contact: Chandrasekar Kannan <ckannan>
Severity: medium Docs Contact:
Priority: low    
Version: 6.0CC: benl, bugzilla, dpal, jgalipea, juanino, kbanerje, matt.savona, prc
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: sssd-1.5.0-1.el6 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-05-19 11:42:02 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 579778    

Description Mike 2010-12-06 14:37:25 UTC
Description of problem:
We have an AD domain that spans two datacenters, and we use custom SRV records so that clients connect to site-local AD servers, and only connect to servers in the other site if all local servers are unavailable.  

We are able to specific a custom SRV record in nss_ldap using the nss_srv_domain option, but if sssd is the preferred method in RHEL6, we need a similiar option.

The "dns_discovery_domain" option has been added in upstream, and we'd like it available in RHEL6.

https://fedorahosted.org/sssd/ticket/479

Version-Release number of selected component (if applicable):
sssd-1.2.1-28.el6.x86_64

Comment 4 Kaushik Banerjee 2011-04-07 12:02:50 UTC
"dns_discovery_domain" feature works now.

On using "dns_discovery_domain = sssdad.com", sssd uses the domain name appropriately and resolves the SRV record.

Log output of /var/log/sssd/sssd_AD.log:

<snip>
(Thu Apr  7 17:24:00 2011) [sssd[be[AD]]] [fo_resolve_service_send] (4): Trying to resolve service 'LDAP'
(Thu Apr  7 17:24:00 2011) [sssd[be[AD]]] [get_port_status] (7): Port status of port 0 for server '(no name)' is 'neutral'
(Thu Apr  7 17:24:00 2011) [sssd[be[AD]]] [resolve_srv_send] (6): The status of SRV lookup is neutral
(Thu Apr  7 17:24:00 2011) [sssd[be[AD]]] [resolve_srv_cont] (4): Searching for servers via SRV query '_ldap._tcp.sssdad.com'
(Thu Apr  7 17:24:00 2011) [sssd[be[AD]]] [resolv_getsrv_send] (4): Trying to resolve SRV record of '_ldap._tcp.sssdad.com'
(Thu Apr  7 17:24:00 2011) [sssd[be[AD]]] [schedule_timeout_watcher] (9): Scheduling DNS timeout watcher
(Thu Apr  7 17:24:00 2011) [sssd[be[AD]]] [unschedule_timeout_watcher] (9): Unscheduling DNS timeout watcher
(Thu Apr  7 17:24:00 2011) [sssd[be[AD]]] [resolve_srv_done] (6): Inserted server 'pluto.sssdad.com:389' for service LDAP
(Thu Apr  7 17:24:00 2011) [sssd[be[AD]]] [set_srv_data_status] (4): Marking SRV lookup of service 'LDAP' as 'resolved'
(Thu Apr  7 17:24:00 2011) [sssd[be[AD]]] [get_server_status] (7): Status of server 'pluto.sssdad.com' is 'name not resolved'

</snip>


Version:
# rpm -qi sssd | head
Name        : sssd                         Relocations: (not relocatable)
Version     : 1.5.1                             Vendor: Red Hat, Inc.
Release     : 24.el6                        Build Date: Sat 02 Apr 2011 01:24:54 AM IST
Install Date: Wed 06 Apr 2011 07:17:24 PM IST      Build Host: x86-012.build.bos.redhat.com
Group       : Applications/System           Source RPM: sssd-1.5.1-24.el6.src.rpm
Size        : 3462740                          License: GPLv3+
Signature   : (none)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
URL         : http://fedorahosted.org/sssd/
Summary     : System Security Services Daemon

Comment 5 Jason 2011-04-07 12:35:26 UTC
We've verified this in the RHEL 6.1 beta and look forward to its release!

Comment 6 errata-xmlrpc 2011-05-19 11:42:02 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2011-0560.html

Comment 7 errata-xmlrpc 2011-05-19 13:09:01 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2011-0560.html