Red Hat Bugzilla – Bug 660323
Provide an option to specify DNS domain for service discovery
Last modified: 2015-01-04 18:45:09 EST
Description of problem: We have an AD domain that spans two datacenters, and we use custom SRV records so that clients connect to site-local AD servers, and only connect to servers in the other site if all local servers are unavailable. We are able to specific a custom SRV record in nss_ldap using the nss_srv_domain option, but if sssd is the preferred method in RHEL6, we need a similiar option. The "dns_discovery_domain" option has been added in upstream, and we'd like it available in RHEL6. https://fedorahosted.org/sssd/ticket/479 Version-Release number of selected component (if applicable): sssd-1.2.1-28.el6.x86_64
"dns_discovery_domain" feature works now. On using "dns_discovery_domain = sssdad.com", sssd uses the domain name appropriately and resolves the SRV record. Log output of /var/log/sssd/sssd_AD.log: <snip> (Thu Apr 7 17:24:00 2011) [sssd[be[AD]]] [fo_resolve_service_send] (4): Trying to resolve service 'LDAP' (Thu Apr 7 17:24:00 2011) [sssd[be[AD]]] [get_port_status] (7): Port status of port 0 for server '(no name)' is 'neutral' (Thu Apr 7 17:24:00 2011) [sssd[be[AD]]] [resolve_srv_send] (6): The status of SRV lookup is neutral (Thu Apr 7 17:24:00 2011) [sssd[be[AD]]] [resolve_srv_cont] (4): Searching for servers via SRV query '_ldap._tcp.sssdad.com' (Thu Apr 7 17:24:00 2011) [sssd[be[AD]]] [resolv_getsrv_send] (4): Trying to resolve SRV record of '_ldap._tcp.sssdad.com' (Thu Apr 7 17:24:00 2011) [sssd[be[AD]]] [schedule_timeout_watcher] (9): Scheduling DNS timeout watcher (Thu Apr 7 17:24:00 2011) [sssd[be[AD]]] [unschedule_timeout_watcher] (9): Unscheduling DNS timeout watcher (Thu Apr 7 17:24:00 2011) [sssd[be[AD]]] [resolve_srv_done] (6): Inserted server 'pluto.sssdad.com:389' for service LDAP (Thu Apr 7 17:24:00 2011) [sssd[be[AD]]] [set_srv_data_status] (4): Marking SRV lookup of service 'LDAP' as 'resolved' (Thu Apr 7 17:24:00 2011) [sssd[be[AD]]] [get_server_status] (7): Status of server 'pluto.sssdad.com' is 'name not resolved' </snip> Version: # rpm -qi sssd | head Name : sssd Relocations: (not relocatable) Version : 1.5.1 Vendor: Red Hat, Inc. Release : 24.el6 Build Date: Sat 02 Apr 2011 01:24:54 AM IST Install Date: Wed 06 Apr 2011 07:17:24 PM IST Build Host: x86-012.build.bos.redhat.com Group : Applications/System Source RPM: sssd-1.5.1-24.el6.src.rpm Size : 3462740 License: GPLv3+ Signature : (none) Packager : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla> URL : http://fedorahosted.org/sssd/ Summary : System Security Services Daemon
We've verified this in the RHEL 6.1 beta and look forward to its release!
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2011-0560.html