#theforeman

mmoll: Sorry for late response, I dought there is anyway to downgrade a running linux is there? I didn't think I was gonna have issues running the latest..should have thought LTS was best.

ola

windows fanboy here

^^

I've integrated a smart-proxy over a MS DNS server on Win2012R2

now, when I'm trying to create a host, it fails at the reverse DNS registering step

and I can see the following error in the DNS smart proxy logs: ERROR -- : unable to find nsupdate binary

am I missing something on the DNS server? seems that this tool is related to bind9

deviantony: it needs to make an update request to the ms dns server

deviantony: it's a specially crafted dns request, nsupdate is the tool to create the correct dns request and send it to the MS DNS server

rjsalts: yeap, seems that I need to install this tool

deviantony: you'll also need to set up a kerberos principal in your AD

rjsalts: really? I thought you needed an AD only for the GSS-TSIG DNS method?

deviantony: the only way to do dynamic updates on MS DNS was GSS afaik, I might be wrong

as stated in the doc

"Bind configuration manipulation is based on nsupdate, which means that in theory could also be used to manipulate other dns servers which support nsupdate (such as Microsoft DNS server)."

sure, but TSIG with a symmetric key vs a kerberos ticket

I'm not sure if MS DNS supports the former, but it certainly supports the latter

that's what I've understood from the docs

I'll try to install nsupdate

then I'll inform you if it's working

nsupdate can do GSS-TSIG, but you need to set up a kerberos principal and a keyfile for it to use, that's all I was saying

thanks for the info

hi, i'm trying to setup puppetrun to work from foreman. So far I installed mcollective & activemq, and can run mco puppet runonce

now the foreman part begins.

what will i need to do to tell foreman to use the mco ?

i enabled puppetrun from the foreman admin menu

but obviously it's not trying to use the mco

deviantony: the process of creating the kerberos keytab is very poorly documented in theforeman web site

I'll check if I can found again the site describing the technical details in a better way.

ah, here is something: http://projects.theforeman.org/projects/foreman...

deviantony: check this web site for creating keytabs : https://www.safesquid.com/content-filtering/int...

just replace the keytab prefix http/ with DNS/

that foreman - mcollective wiki page is from two years back. Does anyone know if it

is still valid?

anyone a clue about this one ? #10841

YamakasY: #10841 is http://theforeman.org/issues/10841 "Bug #10841: Foreman adds Operating systems no matter what - Foreman"

ikke-t: it's documented in the theforeman.org docs, I presume?

mmoll, I just found this: http://theforeman.org/manuals/1.5/#4.3.2SmartPr...

it has chapter about mcollective, perhaps it works, i'll try

the wiki actually seems harmfull info, it instructs to modify the foreman codes

or add stuff there, which likely is outdated

since it's so old wiki

ikke-t: it's a wiki, please edit it :)

hehe, i could if i ever get this working :)

ikke-t: 1.5 is a bit old, also ;)

the extra challenge i have is that part of the stuff is on solaris

shouldn't be that hard, that's only the proxy, iirc

ikke-t: you don't want to go mcollective

it's an animal

still on the nsupdate issue with the smart-proxy

I've installed nsupdate, added it to the path

I can use it by calling nsupdate in the command line

but still, when trying to create a host, the smart-proxy gives me the following error:ERROR -- : unable to find nsupdate binary

YamakasY, I already configured the mcollective for testing

YamakasY, which one do you use?

is there any issue with ruby & the system path?

the puppetrun now fails due foreman can't get to ssl of the foreman proxy, which is on the same host

ssl error :(

deviantony: I didn't have any issuelike that one

Claer_: you're using MS DNS server?