I understand that, what I'm asking is "Is --server required to be configured somewhere for 'normal' ipa use?" I can use -server on the command line. It also seems I can choose to disable SRV lookups when doing ipa-client-install after the SRV lookup fails. Is there anywhere else that I need to configure it? I guess I assumed that if ipa-finduser does a SRV lookup that just using ipa for authentication would also do a SRV lookup. Is that not the case?
-brian On 6/13/11 1:00 PM, "Stephen Gallagher" <sgall...@redhat.com> wrote: On Mon, 2011-06-13 at 14:54 -0500, Stamper, Brian P. (ARC-D)[Logyx LLC] wrote: > > Ok, that's perfect for testing. But when I'm actually using ipa, does > it do this SRV lookup? With -server specificed, ipa-finduser takes > between .5 and .85 seconds, which is great. The reason for this is so that ipa can auto-detect which server is available or least-loaded. With the DNS-based SRV records, it can easily load-balance between replicas. If you're not using replicas and DNS, you should use the --server option.
_______________________________________________ Freeipa-users mailing list Freeipafirstname.lastname@example.org https://www.redhat.com/mailman/listinfo/freeipa-users