[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1039966: isc-dhcp-server.service: Could not get Tjener LDAP object (but it exists).



Hey Mike,

I think, you misunderstood the problem (I didn't communicate it clearly enough). The problem is not resolving ldap(.intern) on TJENER or clients. Thats working.

---
locadm@tjener:~$ ping ldap.intern
PING tjener.intern (10.0.2.2) 56(84) bytes of data.
64 bytes from tjener.intern (10.0.2.2): icmp_seq=1 ttl=64 time=0.056 ms
---

---
locadm@tjener:~$ ping ldap
PING tjener.intern (10.0.2.2) 56(84) bytes of data.
64 bytes from tjener.intern (10.0.2.2): icmp_seq=1 ttl=64 time=0.089 ms
---

isc-dhcp-server does not resolve 'ldap' (anymore?), therefore the 'Could not get Tjener LDAP object' error message.

I also couldn't find an extra search domain option. So maybe this is an upstream bug?

And the easiest fix would be using 'localhost' (like the dhcpd examples are suggesting) or 'ldap.intern' for ldap-server.

Greetings, Daniel

Am 01.07.23 um 06:05 schrieb Mike Gabriel:
Control: tags -1 - pending

Hi Daniel,

On  Fr 30 Jun 2023 11:17:57 CEST, Daniel Teichmann wrote:

Package: debian-edu-config
Severity: important

Error messages popping up in syslog on newly installed systems..

gber (Guido Berhörster) can reproduce this issue.

less /var/log/syslog: ```

2023-06-30T10:02:21.863147+02:00 tjener dhcpd[138165]: Cannot find host LDAP entry tjener (&(objectClass=dhcpServer)(cn=tjener))
```

I reverted your change for this as it does not address the underlying problem.

In a Debian Edu network, all hosts should be reachable via their short hostname (rather than their FQDN).

This is: the underlying fix for this is finding out via

  ping ldap

fails whereas

  ping ldap.intern

does not.

I.e. we need to check /etc/resolv.conf and if there is a "search intern" in it. And if not, we need to find out why it is not there:

```
nameserver 127.0.0.1
search intern
```

Please revisit and find the deeper solution to this problem. Thanks!

Mike

--

DAS-NETZWERKTEAM
Daniel Teichmann

GnuPG Key ID 0x8100A778
mail: daniel.teichmann@das-netzwerkteam.de, https://das-netzwerkteam.de

Attachment: OpenPGP_0xB500EFC78100A778.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature
Description: OpenPGP digital signature


Reply to: