I setup a IPA server: freeipa-server and a replica: freeipa-replica, both
with embedded DNS. I have 2 server addresses:
freeipa-server.dataservice.net
and
freeipa-replica.dataservice.net.
When I am configuring the IPA client using the ipa-client-install, how to
specify the "--server" option? or it can automatically figure out the
server via the DNS resolver?
Thanks, Wenxing
On Mon, Jun 12, 2017 at 6:36 PM, Arpit Tolani <arpittolani(a)gmail.com> wrote:
Hello
> Can you help to shed more lights on how to configure the SRV records for
> auto discovery?
>
When ipa-server is setup with embedded DNS (using --setup-dns ) SRV
records are automatically added in IPA.
If its external DNS server, You need to add records something like
this in your DNS server.
_ldap._tcp.example.com. 86400 IN SRV 0 100 389
ipaserver1.example.com.
_kerberos._tcp.example.com. 86400 IN SRV 0 100 88
ipaserver1.example.com.
_kerberos._udp.example.com. 86400 IN SRV 0 100 88
ipaserver1.example.com.
_kpasswd._tcp.example.com. 86400 IN SRV 0 100 464
ipaserver1.example.com.
_kpasswd._udp.example.com. 86400 IN SRV 0 100 464
ipaserver1.example.com.
After this client will auto discover IPA server which is providing
LDAP & Kerberos information.
Regards
Arpit Tolani