{"action":"created","issue":{"url":"https://api.github.com/repos/freeipa/freeipa-container/issues/51","repository_url":"https://api.github.com/repos/freeipa/freeipa-container","labels_url":"https://api.github.com/repos/freeipa/freeipa-container/issues/51/labels{/name}","comments_url":"https://api.github.com/repos/freeipa/freeipa-container/issues/51/comments","events_url":"https://api.github.com/repos/freeipa/freeipa-container/issues/51/events","html_url":"https://github.com/freeipa/freeipa-container/issues/51","id":128283597,"number":51,"title":"Some DNS entries not changed in `update_server_ip_address`","user":{"login":"ikogan","id":1840337,"avatar_url":"https://avatars0.githubusercontent.com/u/1840337?v=4","gravatar_id":"","url":"https://api.github.com/users/ikogan","html_url":"https://github.com/ikogan","followers_url":"https://api.github.com/users/ikogan/followers","following_url":"https://api.github.com/users/ikogan/following{/other_user}","gists_url":"https://api.github.com/users/ikogan/gists{/gist_id}","starred_url":"https://api.github.com/users/ikogan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ikogan/subscriptions","organizations_url":"https://api.github.com/users/ikogan/orgs","repos_url":"https://api.github.com/users/ikogan/repos","events_url":"https://api.github.com/users/ikogan/events{/privacy}","received_events_url":"https://api.github.com/users/ikogan/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2016-01-23T01:44:55Z","updated_at":"2017-10-02T19:46:20Z","closed_at":"2017-10-02T19:46:20Z","author_association":"NONE","body":"Perhaps I'm not understanding the way `update_server_ip_address` is supposed to be used but it seems like there are two things that aren't updated when the IP address is set, `ipa-ca.$(hostname -d)` and the reverse zone. It's fairly easy to update those using `ipa` like this:\n\n``` sh\nOLD_IP_ADDRESS=$(ip addr show | awk '/inet .*global/ { split($2,a,\"/\"); print a[1]; }' | head -1)\n\nkdestroy -A\necho \"${ADMIN_PASSWORD}\" | kinit admin\nipa dnszone-del $(echo ${IP_ADDRESS} | awk -F. '{ print $3\".\"$2\".\"$1 }').in-addr.arpa\nipa dnszone-add $(echo ${NEW_IP_ADDRESS} | awk -F. '{ print $3\".\"$2\".\"$1 }').in-addr.arpa --name-server=$(hostname -f). --admin-email=hostmaster.$(hostname -d). --allow-sync-ptr=1 --dynamic-update=1\nipa dnsrecord-mod $(hostname -d) $(hostname -a) --a-rec=${OLD_IP_ADDRESS} --a-ip-address=${IP_ADDRESS}\nipa dnsrecord-mod $(hostname -d) ipa-ca --a-rec=${OLD_IP_ADDRESS} --a-ip-address=${IP_ADDRESS}\nkdestroy -A\n```\n\nThe issue I'm having is being reliably able to determine the admin password on startup. I'd prefer not to have to store it in a file (actually, why is the ds master stored in a file?), but the system keytab isn't enough to update those records. Would it be useful to alter the ACLs so it can? Is there a reason `nsupdate` is used currently rather than `ipa` besides the above issue? Is there a reason those aren't updated?\n"},"comment":{"url":"https://api.github.com/repos/freeipa/freeipa-container/issues/comments/333643834","html_url":"https://github.com/freeipa/freeipa-container/issues/51#issuecomment-333643834","issue_url":"https://api.github.com/repos/freeipa/freeipa-container/issues/51","id":333643834,"user":{"login":"felipevolpone","id":1590527,"avatar_url":"https://avatars0.githubusercontent.com/u/1590527?v=4","gravatar_id":"","url":"https://api.github.com/users/felipevolpone","html_url":"https://github.com/felipevolpone","followers_url":"https://api.github.com/users/felipevolpone/followers","following_url":"https://api.github.com/users/felipevolpone/following{/other_user}","gists_url":"https://api.github.com/users/felipevolpone/gists{/gist_id}","starred_url":"https://api.github.com/users/felipevolpone/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/felipevolpone/subscriptions","organizations_url":"https://api.github.com/users/felipevolpone/orgs","repos_url":"https://api.github.com/users/felipevolpone/repos","events_url":"https://api.github.com/users/felipevolpone/events{/privacy}","received_events_url":"https://api.github.com/users/felipevolpone/received_events","type":"User","site_admin":false},"created_at":"2017-10-02T19:46:20Z","updated_at":"2017-10-02T19:46:20Z","author_association":"NONE","body":"Closing this due lack of activity."}}
{"actor":{"display_login":"felipevolpone"}}