SSSD / sssd

#893 The full dyndns update message should be logged into debug logs
Closed: Fixed Opened by jhrozek.

Closed: Fixed
Reopen Issue

Right now, the dynamic DNS update message is not logged anywhere. I suspect that the reason for not including it were security concerns.

I think the message should be logged, because the logs are readable by root only anyway and moreover the update message only contains the following data:

- hostname of the client
- IP addresses of clients's network interface (either the one the client uses to connect to LDAP or one selected in the sssd config file)
- client DNS zone
- Kerberos realm of the client
- IPA server hostname

Adding the full nsupdate message would help in debugging dyndns issues as it would be possible to use the same message directly with nsupdate from the command line.

Raising priority to "major".

Without this logging, it is nearly impossible to debug issues related to the dynamic update feature.

I would recommend, however, that we should only log this information at debug_level = 5 or higher.

component: SSSD => IPA Provider
priority: minor => major

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.6.0
owner: somebody => jhrozek

Fixed by fe8426ea00e7cf6194f0fab9606b3937c4ea3344

resolution: => fixed
status: new => closed

Backported to sssd-1-5

70a393104a1311d4a048823aaad1ab82bc8eb45f

milestone: SSSD 1.6.0 => SSSD 1.5.9
rhbz: =>

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=773326

rhbz: => [https://bugzilla.redhat.com/show_bug.cgi?id=773326 773326]

Metadata Update from @jhrozek:
- Issue assigned to jhrozek
- Issue set to the milestone: SSSD 1.5.9

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1935

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Normal
defect
IPA Provider
1.5.8
0
0
https://bugzilla.redhat.com/show_bug.cgi?id=773326
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.