<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Yup, that should be fine, did you test it? When you test it make sure you disable credential_caching. <div><br></div><div><br><div><div>On Dec 10, 2012, at 5:29 PM, Chandan Kumar <<a href="mailto:chandank.kumar@gmail.com">chandank.kumar@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">Hello,<br><br>I have setup two directory servers on multi-master replication and would like to setup them as fail over servers on the client side.<br><br>I am using sssd on client side, and I did specify both ldap servers on /etc/openldap/ldap.conf and /etc/sssd/sssd.conf like below<br>
<br>[root@dsl cacerts]# cat /etc/openldap/ldap.conf
<br><br>URI ldaps://<a href="http://ldap02.mam.net/">ldap02.mam.net</a> ldaps://<a href="http://ldap.mam.net/">ldap.mam.net</a>
<br>--------------------------------------------------------------------------<br>[root@dsl cacerts]# cat /etc/sssd/sssd.conf
<br>[domain/default]
<br>ldap_uri = ldaps://<a href="http://ldap02.mam.net/">ldap02.mam.net</a>, ldaps://<a href="http://ldap.mam.net/">ldap.mam.net</a><br><br>I am using Centos 6.3 on both side and yum installed the directory server from default Centos repo.<br>
<div><div>--</div><div><a href="http://about.me/chandank" target="_blank">http://about.me/chandank</a><br></div></div><br>
--<br>389 users mailing list<br>389-<a href="mailto:users@lists.fedoraproject.org">users@lists.fedoraproject.org</a><br><a href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></blockquote></div><br></div></body></html>