Hey Mike,I think, you misunderstood the problem (I didn't communicate it clearly enough). The problem is not resolving ldap(.intern) on TJENER or clients. Thats working.
--- locadm@tjener:~$ ping ldap.intern PING tjener.intern (10.0.2.2) 56(84) bytes of data. 64 bytes from tjener.intern (10.0.2.2): icmp_seq=1 ttl=64 time=0.056 ms --- --- locadm@tjener:~$ ping ldap PING tjener.intern (10.0.2.2) 56(84) bytes of data. 64 bytes from tjener.intern (10.0.2.2): icmp_seq=1 ttl=64 time=0.089 ms ---isc-dhcp-server does not resolve 'ldap' (anymore?), therefore the 'Could not get Tjener LDAP object' error message.
I also couldn't find an extra search domain option. So maybe this is an upstream bug?
And the easiest fix would be using 'localhost' (like the dhcpd examples are suggesting) or 'ldap.intern' for ldap-server.
Greetings, Daniel Am 01.07.23 um 06:05 schrieb Mike Gabriel:
Control: tags -1 - pending Hi Daniel, On Fr 30 Jun 2023 11:17:57 CEST, Daniel Teichmann wrote:Package: debian-edu-config Severity: important Error messages popping up in syslog on newly installed systems.. gber (Guido Berhörster) can reproduce this issue. less /var/log/syslog: ```2023-06-30T10:02:21.863147+02:00 tjener dhcpd[138165]: Cannot find host LDAP entry tjener (&(objectClass=dhcpServer)(cn=tjener))```I reverted your change for this as it does not address the underlying problem.In a Debian Edu network, all hosts should be reachable via their short hostname (rather than their FQDN).This is: the underlying fix for this is finding out via ping ldap fails whereas ping ldap.intern does not.I.e. we need to check /etc/resolv.conf and if there is a "search intern" in it. And if not, we need to find out why it is not there:``` nameserver 127.0.0.1 search intern ``` Please revisit and find the deeper solution to this problem. Thanks! Mike
-- DAS-NETZWERKTEAM Daniel Teichmann GnuPG Key ID 0x8100A778 mail: daniel.teichm...@das-netzwerkteam.de, https://das-netzwerkteam.de
OpenPGP_0xB500EFC78100A778.asc
Description: OpenPGP public key
OpenPGP_signature
Description: OpenPGP digital signature