I understand that, what I'm asking is "Is --server required to be configured 
somewhere for 'normal' ipa use?"  I can use -server on the command line.  It 
also seems I can choose to disable SRV lookups when doing ipa-client-install 
after the SRV lookup fails.  Is there anywhere else that I need to configure 
it?  I guess I assumed that if ipa-finduser does a SRV lookup that just using 
ipa for authentication would also do a SRV lookup.  Is that not the case?


On 6/13/11 1:00 PM, "Stephen Gallagher" <sgall...@redhat.com> wrote:

On Mon, 2011-06-13 at 14:54 -0500, Stamper, Brian P. (ARC-D)[Logyx LLC]
> Ok, that's perfect for testing.  But when I'm actually using ipa, does
> it do this SRV lookup?  With -server specificed, ipa-finduser takes
> between .5 and .85 seconds, which is great.

The reason for this is so that ipa can auto-detect which server is
available or least-loaded. With the DNS-based SRV records, it can easily
load-balance between replicas. If you're not using replicas and DNS, you
should use the --server option.

Freeipa-users mailing list

Reply via email to