2

I'm using 'net ads join' to add Linux servers to an AD domain. The servers are multi-homed, with a public IP on eth1 and a non-routable private background network on eth0 (in the 172.20 space, used for netboots and installs and stuff -- no routing to the Internet on that network).

When I 'net ads join', it appears that a DDNS entry is getting created for the 172.20 interface. How can I prevent this from happening?

(FWIW, my powers at the AD level are very limited -- I can join servers and delete server records but that's about it...)

genehack
  • 518
  • 1
  • 6
  • 9

4 Answers4

2

My answer is probably based on new code which wasn't available when the original question was asked, but here it is:

When you do a net ads join, add the option "--no-dns-updates"

From "man net":

   --no-dns-updates
       Do not perform DNS updates as part of "net ads join".
Darcy Partridge
  • 21
  • 2
2

Set the interfaces global parameter in /etc/samba/smb.conf to the interface that should be registered.

interfaces = eth0

Source: https://access.redhat.com/solutions/519193

tuxmanification
  • 21
  • 2
1

I believe that the list of interfaces (in the appropriately-named "interfaces" parameter) that are registered comes from the smb.conf file on the machine you're joining to the AD; if there is no such parameter, then all (non-loopback) interfaces get used.

Here's some documentation on that parameter, which doesn't come out and say the above but definitely implies it in a bunch of places (and also documents the ways you can specify the interfaces in that parameter, e.g., by name or even by netmask):

http://samba.org/~tpot/articles/multiple-interfaces.html

delfuego
  • 236
  • 1
  • 5
  • I just tested this on a fresh build, and unfortunately it does not work. I had 'lo eth1' in the 'interfaces' line in smb.conf and after 'net ads join', AD DNS is now delivering the IP for the eth0 interface (in addition to the eth1 interface -- but that is in the "real" DNS). Further suggestions welcomed... – genehack Apr 08 '10 at 20:31
0

The only way I've found to prevent the unwanted interface from being added is to down it while running the 'net ads join' command. Then it isn't added, and it can be manually brought back up afterwards. Now off to see about filing a Centos bug...

genehack
  • 518
  • 1
  • 6
  • 9