Re: [Freeipa-users] On ipadiscovery.py

2014-02-25 Thread Alexander Bokovoy

On Wed, 26 Feb 2014, Mauricio Tavares wrote:

 Trying to understand the class IPADiscovery and why it does not
like my ubuntu64 box and my network:

1. We start with

root@ubuntu64:~# ipa-client-install
DNS discovery failed to determine your DNS domain
Provide the domain name of your IPA server (ex: example.com):

I take most of the hot action is happening in ipadiscovery.py. Am I
correct to assume that check_domain is looking for lines that contain
"domain" in them? Mine looks like this:

root@ubuntu64:~# cat /etc/resolv.conf
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 10.0.0.1
search in.domain.com
root@ubuntu64:~#

which would (I hope) explain the following entries in the log file:

2014-02-25 23:41:05,995 DEBUG [ipadnssearchldap(in.domain.com)]
2014-02-25 23:41:05,995 DEBUG [ipadnssearchldap(domain.com)]
2014-02-25 23:41:05,995 DEBUG [ipadnssearchldap(com)]
2014-02-25 23:41:05,995 DEBUG [ipadnssearchldap(in.domain.com)]
2014-02-25 23:41:05,995 DEBUG [ipadnssearchldap(domain.com)]
2014-02-25 23:41:05,996 DEBUG [ipadnssearchldap(com)]
2014-02-25 23:41:05,996 DEBUG Domain not found

Run ipa-client-install under strace -f -s 4096 -tt and see the log what
exactly it contacts through the resolver.

--
/ Alexander Bokovoy

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


[Freeipa-users] On ipadiscovery.py

2014-02-25 Thread Mauricio Tavares
  Trying to understand the class IPADiscovery and why it does not
like my ubuntu64 box and my network:

1. We start with

root@ubuntu64:~# ipa-client-install
DNS discovery failed to determine your DNS domain
Provide the domain name of your IPA server (ex: example.com):

I take most of the hot action is happening in ipadiscovery.py. Am I
correct to assume that check_domain is looking for lines that contain
"domain" in them? Mine looks like this:

root@ubuntu64:~# cat /etc/resolv.conf
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 10.0.0.1
search in.domain.com
root@ubuntu64:~#

which would (I hope) explain the following entries in the log file:

2014-02-25 23:41:05,995 DEBUG [ipadnssearchldap(in.domain.com)]
2014-02-25 23:41:05,995 DEBUG [ipadnssearchldap(domain.com)]
2014-02-25 23:41:05,995 DEBUG [ipadnssearchldap(com)]
2014-02-25 23:41:05,995 DEBUG [ipadnssearchldap(in.domain.com)]
2014-02-25 23:41:05,995 DEBUG [ipadnssearchldap(domain.com)]
2014-02-25 23:41:05,996 DEBUG [ipadnssearchldap(com)]
2014-02-25 23:41:05,996 DEBUG Domain not found

2. In ipadnssearchldap, are the lines

qname = "_ldap._tcp."+tdomain
# terminate the name
if not qname.endswith("."):
qname += "."
results = ipapython.dnsclient.query(qname,
ipapython.dnsclient.DNS_C_IN, ipapython.dnsclient.DNS_T_SRV)

supposed to do something like

root@ubuntu64:~# dig +short _ldap._tcp.in.domain.com SRV
0 0 389 auth.in.domain.com.
root@ubuntu64:~#

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users