1.8. Modifying dynamic DNS settings for the AD provider

Procedure

1. Open the /etc/sssd/sssd.conf configuration file in a text editor.

2. Add the following options to the [domain] section for your AD domain to set the DNS record refresh interval to 12 hours, disable updating PTR records, and set the DNS record Time To Live (TTL) to 1 hour.

   [domain/ad.example.com]
   id_provider = ad
   ...
   dyndns_refresh_interval = 43200
   dyndns_update_ptr = false
   dyndns_ttl = 3600

3. Save and close the /etc/sssd/sssd.conf configuration file.

4. Restart the SSSD service to load the configuration changes.

   [root@client ~]# systemctl restart sssd

   注意

   You can disable dynamic DNS updates by setting the dyndns_update option in the sssd.conf file to false:

   [domain/ad.example.com]
   id_provider = ad
   ...
   
   dyndns_update = false