Multiple DNS records created in AD

Latest response

Hi,

I have been successfully joining RHEL 7.2 and 7.3 servers to an Active Directory domain and creatong DNS records correctly. However, when a server has multiple NICs and IP Addresses there are multiple DNS records created all with the same name.

Has anyone come across this? Is there a way to avoid it?

Any suggestions would be appreciated.

AF
Log in to join the conversation

Responses

MK Guru 1972 points
8 June 2017 1:55 PM

For RHEL 5 and 6, there is this solution for exactly this problem:

https://access.redhat.com/solutions/519193

i.e. using the "interfaces" keyword in /etc/samba/smb.conf to identify the network interface(s) you wish AD and the SMB/CIFS ecosystem to be aware of.

The configuration seems similar in this regard in RHEL 7.3's version of Samba, so perhaps the solution will apply to RHEL 7.x too?

PS Newbie 5 points
9 June 2017 12:55 AM

Thanks Matti, I'm working with Andy on this project, do you know if smb.conf is used when using realm to connect to AD?

MK Guru 1972 points
13 June 2017 8:34 AM

I did not find any conclusive word on that and cannot test at the moment. However, it looks like realm/realmd mostly works its magic by configuring the underlying sssd/winbind components, and it does not have a way to specify SMB settings in detail, I'd expect that realm/realmd acts like a good boss and only specifies the things that are important to it, leaving any "implementation details" to the appropriate sub-systems.

Besides, how else would you configure SMB shares if you wanted to share some directories over SMB while using realm to provide the AD connection?

AF Newbie 10 points
28 June 2017 11:17 PM

Hi Matti,

Still struggling with this. If I do install SMB, I can specify the interfaces and that works well... I just don't want to install SMB if I can avoid it.

There has to be a way with sssd/adcli/winbind to ensure only a specific interface has DNS created.

I will probably raise a ticket with Support. If I get an answer I'll post it back here.

CF Community Member 67 points
29 June 2017 10:42 AM

Have you had a look at the dyndns_iface and dyndns_update options in sssd.conf? This may solve your problem. The sssd-ad man page has more info.

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.