From owner-freebsd-questions@FreeBSD.ORG Wed Jun 11 09:20:14 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 492B71065676 for ; Wed, 11 Jun 2008 09:20:14 +0000 (UTC) (envelope-from freebsd-questions@m.gmane.org) Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) by mx1.freebsd.org (Postfix) with ESMTP id D305F8FC18 for ; Wed, 11 Jun 2008 09:20:13 +0000 (UTC) (envelope-from freebsd-questions@m.gmane.org) Received: from list by ciao.gmane.org with local (Exim 4.43) id 1K6MV0-0002Dd-JX for freebsd-questions@freebsd.org; Wed, 11 Jun 2008 09:20:10 +0000 Received: from 195.184.197.130 ([195.184.197.130]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 11 Jun 2008 09:20:10 +0000 Received: from c.kworr by 195.184.197.130 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 11 Jun 2008 09:20:10 +0000 X-Injected-Via-Gmane: http://gmane.org/ To: freebsd-questions@freebsd.org From: Volodymyr Kostyrko Date: Wed, 11 Jun 2008 12:19:57 +0300 Lines: 72 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: 195.184.197.130 User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; ru-RU; rv:1.8.1.13) Gecko/20080521 SeaMonkey/1.1.9 Sender: news Subject: hesiod in RELENG_7 not working or poorly documented X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jun 2008 09:20:14 -0000 Hi all. I'm trying to setup a hesiod/kerberos based domain. Kerberos works just fine but as for hesiod I can't understand what I need to do to make it work. Originally I have created a sample zone 'ns.local': $TTL 86400 ; 1 day @ IN SOA server.local. hostmaster.server.local. ( 2008061101 3600 900 2419200 3600 ) ; Serial Refresh Retry Expire Minimum IN NS server.local. IN MX 0 server.local. test.passwd TXT "test:*:2001:2001::0:0:Test user:/home/test:/bin/tcsh" 2001.uid CNAME test.passwd test.group TXT "test:*:2001:" 2001.gid CNAME test.group And used this configuration file: rhs = local lhs = hs classes = IN The hesinfo works with no problems: # hesinfo test passwd test:*:2001:2001::0:0:Test user:/home/test:/bin/tcsh However finger stands that user test is uknown: I'm using the following nsswitch.conf: # # nsswitch.conf(5) - name service switch configuration file # $FreeBSD: src/etc/nsswitch.conf,v 1.1 2006/05/03 15:14:47 ume Exp $ # group: compat group_compat: dns hosts: files dns networks: files passwd: compat passwd_compat: dns shells: files services: compat services_compat: dns protocols: files rpc: files And I do have the +::::... lines in /etc/passwd and /etc/group. I've tried to debug the cause of the error and it reveals that hesinfo and finger makes different lookups: hesinfo: client 127.0.0.1#62846: view internal: query: test.passwd.hs.tandem.local IN TXT + finger: client 127.0.0.1#51278: view internal: query: passwd-0.passwd.hs.tandem.local IN TXT + I've searched the net for 'passwd-0' cause and tried to make something for this to work, but all my efforts were futile. Can anyone help me with hesiod configuration? Just a little sample of your working zone would be enough. -- Sphinx of black quartz judge my vow.