LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (http://www.linuxquestions.org/questions/linux-networking-3/)
-   -   cannot register RHEVM with virtualized domain (http://www.linuxquestions.org/questions/linux-networking-3/cannot-register-rhevm-with-virtualized-domain-4175444700/)

irreverentryan 01-08-2013 01:30 PM

cannot register RHEVM with virtualized domain
 
Hi All,

I've got a RHEVM machine running as a router between the production network and the test network (We are moving from VMware to RHEV). I have setup a virtualized RHEL DNS server (192.168.10.31)and I have a virtualized Windows 2008 R2 Domain Controller (192.168.10.35) that is also hosting DNS. The windows server points to 192.168.10.31 primarily, and our production DNS, 192.168.1.39, secondarily. I am able to "dig" up the virtual domain (mmci.domain) but I am unable to "rhevm-manage-domains" and conenct to it. It claims a failed kerberos service, or possible networking issue.

From RHEVM:
Code:

[root@RHEVM-01 dhcp]# dig mmci.domain

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.6 <<>> mmci.domain
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10651
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;mmci.domain.                        IN        A

;; AUTHORITY SECTION:
mmci.domain.                3600        IN        SOA        mmci-dc01.mmci.domain. hostmaster.mmci.domain. 6 900 600 86400 3600

;; Query time: 2 msec
;; SERVER: 192.168.10.35#53(192.168.10.35)
;; WHEN: Tue Jan  8 14:16:44 2013
;; MSG SIZE  rcvd: 86

[root@RHEVM-01 dhcp]# rhevm-manage-domains -action=add -domain=mmci -user=superadmin -interactive
Enter password:

Error: Authentication Failed. Please verify the fully qualified domain name that is used for authentication is correct.. Problematic domain is: mmc.domain
Failure while applying Kerberos configuration. Details: Authentication Failed. Please verify the fully qualified domain name that is used for authentication is correct.
[root@RHEVM-01 dhcp]# rhevm-manage-domains -action=add -domain=mmci.domain -user=superadmin -interactive
Enter password:

Error: Authentication Failed. Please verify the fully qualified domain name that is used for authentication is correct.. Problematic domain is: mmc.domain
Failure while applying Kerberos configuration. Details: Authentication Failed. Please verify the fully qualified domain name that is used for authentication is correct.

I am not toally familiar with the inner workings of DNS and I am sure that something involving it is causing this issue. Any suggestions on where to start looking? Right now the RHEVM machine is properly added to the production domain (MMC) but not the test domain (MMCI).

Thanks!

Kustom42 01-11-2013 06:22 PM

This may sound dumb but on the window server run an ipconfig /all and make sure there arent any DNS suffix being appended to the domain name. It must be the exact name that is configured on the Windows server. If your host name is mmci.domain but the windows server is set to have a dns suffix of .corp.com the actual FQDN for the windows box is mmci.domain.corp.com.

This can also be a permissions issue with the user your are trying to use to join the system to the domain. Verify the user is in all the right groups and so on

Kustom42 01-11-2013 06:23 PM

Also, note in your DNS resposne that you have "0 Answer" that means your dig is NOT successful. It is pulling an SOA record which is good but you are getting no answer from the DNS server, you should see a "mmci.domain IN A IPADDRESS"


All times are GMT -5. The time now is 04:27 AM.