I understand that, what I'm asking is "Is --server required to be configured
somewhere for 'normal' ipa use?" I can use -server on the command line. It
also seems I can choose to disable SRV lookups when doing ipa-client-install
after the SRV lookup fails. Is there anywhere else that I need to configure
it? I guess I assumed that if ipa-finduser does a SRV lookup that just using
ipa for authentication would also do a SRV lookup. Is that not the case?
On 6/13/11 1:00 PM, "Stephen Gallagher" <sgall...@redhat.com> wrote:
On Mon, 2011-06-13 at 14:54 -0500, Stamper, Brian P. (ARC-D)[Logyx LLC]
> Ok, that's perfect for testing. But when I'm actually using ipa, does
> it do this SRV lookup? With -server specificed, ipa-finduser takes
> between .5 and .85 seconds, which is great.
The reason for this is so that ipa can auto-detect which server is
available or least-loaded. With the DNS-based SRV records, it can easily
load-balance between replicas. If you're not using replicas and DNS, you
should use the --server option.
Freeipa-users mailing list