Rob, here's what I see in that log: 

2017-04-19T21:18:23Z DEBUG Using servers from command line, disabling
DNS discovery
2017-04-19T21:18:23Z DEBUG will use provided server:
2017-04-19T21:18:23Z DEBUG will use discovered realm: IPA.SERVICES.FOO
2017-04-19T21:18:23Z DEBUG will use discovered basedn:
2017-04-19T21:18:23Z INFO Client hostname:
2017-04-19T21:18:23Z DEBUG Hostname source: Provided as option
2017-04-19T21:18:23Z INFO Realm: IPA.SERVICES.FOO
2017-04-19T21:18:23Z DEBUG Starting external process
2017-04-19T21:18:23Z DEBUG args=/bin/hostname
2017-04-19T21:18:23Z DEBUG Process finished, return code=0
2017-04-19T21:18:23Z DEBUG stdout=
2017-04-19T21:18:23Z DEBUG stderr=
2017-04-19T21:18:23Z DEBUG Backing up system configuration file

So whatever that external process is, I guess that's what's resetting
the hostname. 

For reference, here's the line that runs (on cloud-init) to set up

      /usr/sbin/ipa-client-install \ \ \
      -U \
      --permit \
      --ssh-trust-dns \
      --principal=enrollment \
      --password="PASS" \
      --hostname="{{ ansible_eth0.ipv4.address }}" 

On 2017-04-19 16:27, Rob Crittenden wrote:

> wrote: 
>> When the instances register themselves with FreeIPA, their hostnames get
>> changed to match their IP; that's a FreeIPA rule, I believe. So in this
>> case, the hostname is 10.100.*.
>> ubuntu@10:~$ hostname
> There is something very wrong. ipa-client should be setting a FQDN, not
> an IP address. /var/log/ipaclient-install.log may hold some clues.
> rob
> On 2017-04-19 14:53, Jason B. Nance wrote:
> Hi Greg,
> I'm trying to set up a rule based on server hostname. So for
> example, 10.100.* would be put into the 'developers' hostgroup. I
> can't figure out the proper format of the inclusive regex. I've tried:
> I believe that your regex needs to match the host name, not the IP
> address.  Unless your host name is 10.100.<something> I don't think
> that will match.  The regex for "anything" is ".*".  I think that the
> pcre syntax is what is used.
> Regards,
> j
Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to