SSSD - Dynamic Multiple NIC

[Personne]

Hello,

I'm currently using an older version of SSSD 1.13 on Centos 6, we are
migrating to Centos 7, and I was thinking of enabling dynamic DNS update.

My problem is our servers do have multiple NIC from 1 to 6.

Is there an article somewhere explaining how SSSD works with multiple NIC ?
Since I was not able to find any complete doc about this yet.
- Is it possible to tell SSSD to dynamic DNS eth0 and eth5 ?
- Is it possible to tell SSSD to dynamic DNS all eth, and add a suffix with
the ID NIC such as : server1-eth0 .test.com / server1-eth2 .test.com,
etc....

Thank you

[Justin Stephenson]

Are you looking for the `dyndns_iface` option? It should be mentioned
in the `sssd-ipa`, or `sssd-ad` man page. I'm not aware of any article
specifically about working with multiple NICs.

-Justin

On Sun, Mar 21, 2021 at 7:35 PM Personne  wrote:
> Hello,
>
> I'm currently using an older version of SSSD 1.13 on Centos 6, we are migrating to Centos 7, and I was thinking of enabling dynamic DNS update.
>
> My problem is our servers do have multiple NIC from 1 to 6.
>
> Is there an article somewhere explaining how SSSD works with multiple NIC ?
> Since I was not able to find any complete doc about this yet.
> Is it possible to tell SSSD to dynamic DNS eth0 and eth5 ?
> Is it possible to tell SSSD to dynamic DNS all eth, and add a suffix with the ID NIC such as : server1-eth0 .test.com / server1-eth2 .test.com, etc....
>
> Thank you
>
> sssd-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail].o...
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

[Pawel Polawski]

Hi Personne,

Please take a look at this blog post [1], it refers to an older version of
SSSD but may be useful for you.

[1] https://preichl.wordpress.com/2015/08/09/dynamic-dns-updates-in-sssd/

Best regards,
Pawel

On Mon, Mar 22, 2021 at 2:20 PM Justin Stephenson 
wrote:
> Are you looking for the `dyndns_iface` option? It should be mentioned
> in the `sssd-ipa`, or `sssd-ad` man page. I'm not aware of any article
> specifically about working with multiple NICs.
>
> -Justin
>
> On Sun, Mar 21, 2021 at 7:35 PM Personne  wrote:
> > Hello,
> >
> > I'm currently using an older version of SSSD 1.13 on Centos 6, we are
>
> migrating to Centos 7, and I was thinking of enabling dynamic DNS update.
> > My problem is our servers do have multiple NIC from 1 to 6.
> >
> > Is there an article somewhere explaining how SSSD works with multiple
>
> NIC ?
> > Since I was not able to find any complete doc about this yet.
> > Is it possible to tell SSSD to dynamic DNS eth0 and eth5 ?
> > Is it possible to tell SSSD to dynamic DNS all eth, and add a suffix
>
> with the ID NIC such as : server1-eth0 .test.com / server1-eth2 .test.com,
> etc....
> > Thank you
> >
> > sssd-users mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
> > Fedora Code of Conduct:
>
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
>
> https://lists.fedorahosted.org/archives/list/[e-mail].o...
> > Do not reply to spam on the list, report it:
>
> https://pagure.io/fedora-infrastructure
> _______________________________________________
> sssd-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail].o...
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure

[Tomas Halman]

Hi Personne.

SSSD by default uses the address from the interface that is used when
communicating to IPA or AD.
See man sssd-ad and sssd-ipa:

dyndns_update (boolean) (this is from IPA)
    ....
    The IP address of the IPA LDAP connection is used for the updates, if
it is
    not otherwise specified by using the dyndns_iface option.
    ....

HTH
Tom

On Mon, Mar 22, 2021 at 2:52 PM Pawel Polawski  wrote:
> Hi Personne,
>
> Please take a look at this blog post [1], it refers to an older version of
> SSSD but may be useful for you.
>
> [1] https://preichl.wordpress.com/2015/08/09/dynamic-dns-updates-in-sssd/
>
> Best regards,
> Pawel
>
> On Mon, Mar 22, 2021 at 2:20 PM Justin Stephenson 
> wrote:
> > Are you looking for the `dyndns_iface` option? It should be mentioned
> > in the `sssd-ipa`, or `sssd-ad` man page. I'm not aware of any article
> > specifically about working with multiple NICs.
> >
> > -Justin
> >
> > On Sun, Mar 21, 2021 at 7:35 PM Personne  wrote:
> > > Hello,
> > >
> > > I'm currently using an older version of SSSD 1.13 on Centos 6, we are
> >
> > migrating to Centos 7, and I was thinking of enabling dynamic DNS update.
> > > My problem is our servers do have multiple NIC from 1 to 6.
> > >
> > > Is there an article somewhere explaining how SSSD works with multiple
> >
> > NIC ?
> > > Since I was not able to find any complete doc about this yet.
> > > Is it possible to tell SSSD to dynamic DNS eth0 and eth5 ?
> > > Is it possible to tell SSSD to dynamic DNS all eth, and add a suffix
> >
> > with the ID NIC such as : server1-eth0 .test.com / server1-eth2 .test.com,
> > etc....
> > > Thank you
> > >
> > > sssd-users mailing list -- [e-mail]
> > > To unsubscribe send an email to [e-mail]
> > > Fedora Code of Conduct:
> >
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > List Archives:
> >
> > https://lists.fedorahosted.org/archives/list/[e-mail].o...
> > > Do not reply to spam on the list, report it:
> >
> > https://pagure.io/fedora-infrastructure
> > _______________________________________________
> > sssd-users mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
> > Fedora Code of Conduct:
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> > https://lists.fedorahosted.org/archives/list/[e-mail].o...
> > Do not reply to spam on the list, report it:
> > https://pagure.io/fedora-infrastructure
>
> --
>
> Paweł Poławski
>
> Senior Software Engineer
>
> Red Hat https://www.redhat.com/
>
> [e-mail]
> @RedHat https://twitter.com/redhat   Red Hat
> https://www.linkedin.com/company/red-hat  Red Hat
> https://www.facebook.com/RedHatInc
> https://red.ht/sig
> _______________________________________________
> sssd-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail].o...
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure

[Personne]

Thank you for your replies, the default behavior is good, but unfortunately
not enough for my need.

You all skipped the 2nd part of my message :-)
- Is it possible to tell SSSD to dynamic DNS all eth, and add a suffix with
the ID NIC such as : server1-eth0 .test.com / server1-eth2 .test.com,
etc....*

or something like that?
myserver-eth0.domain.local
myserver-eth1.domain.local
myserver-eth2 .domain.local

or even something more customizable with

myserver.domain.local
myserver-mgt.domain.local
myserver-oob.domain.local
myserver-nas.domain.local

The idea would be to add a suffix (or prefix) to the hostname per NIC.

It is maybe a very specific need, but I could be a nice feature I think.

On Mon, Mar 22, 2021 at 8:28 AM Tomas Halman  wrote:
> Hi Personne.
>
> SSSD by default uses the address from the interface that is used when
> communicating to IPA or AD.
> See man sssd-ad and sssd-ipa:
>
> dyndns_update (boolean) (this is from IPA)
>     ....
>     The IP address of the IPA LDAP connection is used for the updates, if
> it is
>     not otherwise specified by using the dyndns_iface option.
>     ....
>
> HTH
> Tom
>
> On Mon, Mar 22, 2021 at 2:52 PM Pawel Polawski 
> wrote:
> > Hi Personne,
> >
> > Please take a look at this blog post [1], it refers to an older version
> > of SSSD but may be useful for you.
> >
> > [1] https://preichl.wordpress.com/2015/08/09/dynamic-dns-updates-in-sssd/
> >
> > Best regards,
> > Pawel
> >
> > On Mon, Mar 22, 2021 at 2:20 PM Justin Stephenson 
> > wrote:
> > > Are you looking for the `dyndns_iface` option? It should be mentioned
> > > in the `sssd-ipa`, or `sssd-ad` man page. I'm not aware of any article
> > > specifically about working with multiple NICs.
> > >
> > > -Justin
> > >
> > > On Sun, Mar 21, 2021 at 7:35 PM Personne  wrote:
> > > > Hello,
> > > >
> > > > I'm currently using an older version of SSSD 1.13 on Centos 6, we are
> > >
> > > migrating to Centos 7, and I was thinking of enabling dynamic DNS update.
> > > > My problem is our servers do have multiple NIC from 1 to 6.
> > > >
> > > > Is there an article somewhere explaining how SSSD works with multiple
> > >
> > > NIC ?
> > > > Since I was not able to find any complete doc about this yet.
> > > > Is it possible to tell SSSD to dynamic DNS eth0 and eth5 ?
> > > > Is it possible to tell SSSD to dynamic DNS all eth, and add a suffix
> > >
> > > with the ID NIC such as : server1-eth0 .test.com / server1-eth2 .
> > > test.com, etc....
> > > > Thank you
> > > >
> > > > sssd-users mailing list -- [e-mail]
> > > > To unsubscribe send an email to
> > >
> > > [e-mail]
> > > > Fedora Code of Conduct:
> > >
> > > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > > > List Guidelines:
> > >
> > > https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > > List Archives:
> > >
> > > https://lists.fedorahosted.org/archives/list/[e-mail].o...
> > > > Do not reply to spam on the list, report it:
> > >
> > > https://pagure.io/fedora-infrastructure
> > > _______________________________________________
> > > sssd-users mailing list -- [e-mail]
> > > To unsubscribe send an email to [e-mail]
> > > Fedora Code of Conduct:
> > > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > List Archives:
> > > https://lists.fedorahosted.org/archives/list/[e-mail].o...
> > > Do not reply to spam on the list, report it:
> > > https://pagure.io/fedora-infrastructure
> >
> > --
> >
> > Paweł Poławski
> >
> > Senior Software Engineer
> >
> > Red Hat https://www.redhat.com/
> >
> > [e-mail]
> > @RedHat https://twitter.com/redhat   Red Hat
> > https://www.linkedin.com/company/red-hat  Red Hat
> > https://www.facebook.com/RedHatInc
> > https://red.ht/sig
> > _______________________________________________
> > sssd-users mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
> > Fedora Code of Conduct:
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> > https://lists.fedorahosted.org/archives/list/[e-mail].o...
> > Do not reply to spam on the list, report it:
> > https://pagure.io/fedora-infrastructure
>
> --
> Tomas Halman
>
> sssd-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail].o...
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure