On Tue, 05 Jan 2016, Karl Forner wrote:
modifying the /etc/krb5.conf, and replacing the name of my freeipa master
by the replica fixes the problem.
So that proves that the kdc is not picked up by discovery.
This implies you have explicit line stating the KDC address in your
krb5.conf. That means no DNS SRV record discovery will be done at all
because there is no need to discover anything.
Look at the Natxo's example in the other email.
/ Alexander Bokovoy
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project