Bug #3428

« Previous | Next »

NethServer joined to AD fail Kerberos ticket renewal

Added by Nicola Rauso almost 5 years ago. Updated almost 5 years ago.

Status:CLOSEDStart date:
Priority:NormalDue date:
Assignee:-% Done:

100%

Category:nethserver-collectd
Target version:v6.8
Security class: Resolution:
Affected version:v6.8 NEEDINFO:No

Description

On a NethServer joined to an AD domain the installation of "nethserver-collectd" package adds a fragment to the file "/etc/hosts" used to attribue the DNS name DNS.domain.tld to the primary DNS server configured in NethServer.
That fragment breaks the correct reverse lookup of primary dns server name that in AD scenarios is the AD PDC itself.

Before nethserver-collectd installation:

# config show dns
dns=configuration
    NameServers=192.168.0.110

# host dc1.domain.tld
dc1.domain.tld has address 192.168.0.110

# host 192.168.0.110
110.0.168.192.in-addr.arpa domain name pointer dc1.domain.tld.

After nethserver-collectd installation:

# config show dns
dns=configuration
    NameServers=192.168.0.110

# host dc1.domain.tld
dc1.domain.tld has address 192.168.0.110

# host 192.168.0.110
110.0.168.192.in-addr.arpa domain name pointer DNS.domain.tld.

This configuration prevents communication between NethServer and AD PDC needed for Kerberos ticket renewal.

Associated revisions

Revision 1bd59585
Added by Filippo Carletti almost 5 years ago

collectd/ping: ping dns using ipaddress instead of DNS hostname. Refs #3428

Revision 889a1ffe
Added by Filippo Carletti almost 5 years ago

collectd/ping: ping dns using ipaddress instead of DNS hostname. Refs #3428

History

#1 Updated by Nicola Rauso almost 5 years ago

  • Subject changed from NethServer joined to AD fail Kerberos ticket renewal to NethServer joined to AD fails Kerberos ticket renewal

#2 Updated by Nicola Rauso almost 5 years ago

  • Description updated (diff)

#3 Updated by Filippo Carletti almost 5 years ago

  • Subject changed from NethServer joined to AD fails Kerberos ticket renewal to NethServer joined to AD fail Kerberos ticket renewal
  • Description updated (diff)
  • Category set to nethserver-collectd
  • Status changed from NEW to TRIAGED
  • Assignee set to Filippo Carletti
  • Target version set to v6.8
  • % Done changed from 0 to 20
  • Affected version set to v6.8

#4 Updated by Filippo Carletti almost 5 years ago

  • Status changed from TRIAGED to ON_DEV
  • % Done changed from 20 to 30

#5 Updated by Filippo Carletti almost 5 years ago

  • Status changed from ON_DEV to MODIFIED
  • % Done changed from 30 to 60

I've created a pull request from my fork:
https://github.com/NethServer/nethserver-collectd/pull/7

#6 Updated by Filippo Carletti almost 5 years ago

  • Status changed from MODIFIED to ON_QA
  • Assignee deleted (Filippo Carletti)
  • % Done changed from 60 to 70

Package in nethserver-testing:
nethserver-collectd-2.0.3-1.1.g1bd5958.ns6.noarch.rpm

#7 Updated by Nicola Rauso almost 5 years ago

  • Assignee set to Nicola Rauso

#8 Updated by Nicola Rauso almost 5 years ago

  • Status changed from ON_QA to VERIFIED
  • Assignee deleted (Nicola Rauso)
  • % Done changed from 70 to 90

Tested: OK

#9 Updated by Giacomo Sanchietti almost 5 years ago

  • Status changed from VERIFIED to CLOSED
  • % Done changed from 90 to 100
Released:
  • 6.8: nethserver-collectd-3.0.3-1.ns7.noarch.rpm
  • 7.2.15155: nethserver-collectd-2.0.4-1.ns6.noarch.rpm

Also available in: Atom PDF