Received-SPF: pass (google.com: domain of linux-nfs-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
Subject: Re: idmapd Domain issue
To:     Joakim Tjernlund <Joakim.Tjernlund@infinera.com>,
        "linux-nfs@vger.kernel.org" <linux-nfs@vger.kernel.org>
References: <80a43e48b6f0c6c8806d1f8f6ca5ed575269445f.camel@infinera.com>
 <13df4b7e-c965-6ca8-eadd-a45e9f841914@RedHat.com>
 <3d4d41bde90709f0016d37f1f60c71ad61d10e75.camel@infinera.com>
From:   Steve Dickson <SteveD@RedHat.com>
Message-ID: <a875a92d-da04-3393-f65e-4bfead9b7921@RedHat.com>
Date:   Sat, 5 Sep 2020 12:44:14 -0400
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101
 Thunderbird/68.11.0
MIME-Version: 1.0
In-Reply-To: <3d4d41bde90709f0016d37f1f60c71ad61d10e75.camel@infinera.com>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Sender: linux-nfs-owner@vger.kernel.org
Precedence: bulk

Sorry for the delay.... 

On 8/10/20 10:26 AM, Joakim Tjernlund wrote:
> On Mon, 2020-08-10 at 10:13 -0400, Steve Dickson wrote:
>> CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.
>>
>>
>> On 8/8/20 6:21 AM, Joakim Tjernlund wrote:
>>> We got an old, non existing, domain configured for idmapd, like so:
>>>   Domain = x.y
>>>
>>> Now I would like to change that to our new domain but I cannot
>>> change all computers using the old domain at the same time.
>>>
>>> Ideally I would like to just add the new domain and then change
>>> clients gradually as time permits.
>>>
>>> Currently idmapd does not seems to support this ?
>> I not sure if that helps... but rpc.idmapd does query DNS
>> looking for the _nfsv4idmapdomain text record...  Add
>>      _nfsv4idmapdomain IN TXT "domainname"
>>  recorded to your DNS
> 
> You mean:
>  1) Add _nfsv4idmapdomain IN TXT "x.y" to DNS
>  2) Rm all Domain = x.y idmapd conf
>  3) Change nfsv4idmapdomain IN TXT "new.com" (do I need to restart idmapd here too?)
Yes, yes and yes... That should work... 

steved.
> ?
> 
>>
>>> Could multiple domains be added ?
>> Patches are always welcome! ;-) But I don't see
>> how the would ever work and its probably break
>> a few specs.
> 
> They didn't consider rename migration when those specs where written :)
> 
>  Jocke
> 
>>
>> steved.
>>>
>>>  Jocke
>>>
>>
>