On Mon, 2016-08-22 at 10:51 +0200, Jakub Hrozek wrote:
> On Mon, Aug 22, 2016 at 08:31:33AM +0000, Ondrej Valousek wrote:
> > 
> > Ok, different words:
> > In my case, `hostname` returns shortname, but `hostname -f` returns FQDN.
> > Is my system configured correctly or not?
> 
> it depends :)
> 
> hostname -f takes the output of hostname and canonicalizes it with the
> help of DNS records or in your case /etc/hosts records. What Joakim was
> proposing was that we do the same in sssd. But since there's no guarantee

Not quite, I am proposing to take the configured domain in sssd.conf, it is 
always
there(no need for DNS etc)

> that each and every program on the system will canonicalize the
> hostname. Many programs and libraries have been going in the other direction
> (even libldap, cyrus-sasl and Kerberos) and they avoid canonicalizing the
> hostname unless told explicitly to do so, because in the real world, DNS is
> often broken, not to mention roaming clients that change networks often, etc.
> 
> I think it's safer to set the hostname to match the full name of the
> computer as set in the joined realm from the start. I guess what we
> /could/ do is to add a more generic option to tell SSSD to canonicalize
> the hostname on boot and then set ad_hostname/ipa_hostname/etc based on that,
> but I'm against canonicalization by default.
> _______________________________________________
> sssd-users mailing list
> [email protected]
> https://lists.fedorahosted.org/admin/lists/[email protected]
_______________________________________________
sssd-users mailing list
[email protected]
https://lists.fedorahosted.org/admin/lists/[email protected]

Reply via email to