[Freeipa-users] Re: bind-dyndb-ldap and RPZ

2017-06-26 Thread Brendan Kearney via FreeIPA-users
On 06/26/2017 02:52 PM, Brendan Kearney wrote: are response policy zones supported by bind-dyndb-ldap? i am looking to set something up that prevents my smart tv from spying on me, and found this URL: http://rainbow.chard.org/2017/03/08/selectively-blocking-samsung-tvs-network-access/ a

[Freeipa-users] Re: LoadBalancer vs. DNS

2022-06-10 Thread Brendan Kearney via FreeIPA-users
I think you need to break apart the pieces of IPA you want to load balance.  The LDAP pieces might be handled differently than the Kerberos token pieces. I am not using IPA, but I do have load balanced OpenLDAP and "load sharing" MIT KDCs.  My LDAP instances are behind HAProxy.  I needed to

[Freeipa-users] Re: FreeIPA and samba problems

2022-06-07 Thread Brendan Kearney via FreeIPA-users
its been a long time since i dug into all the gory bits and bobs of samba configs, but i have some nifty functionality working via some go-it-alone ingenuity.  I have a fedora box, running samba, and it is tied to my OpenLDAP/Kerberos/SASL domain via sssd. in sssd, i set the id_provider to

[Freeipa-users] Re: LoadBalancer vs. DNS

2022-11-04 Thread Brendan Kearney via FreeIPA-users
in the office told me BGP has more "nerd knobs" to turn, so i stayed with it. hope this helps, brendan On 11/4/22 11:35 AM, Ronald Wimmer via FreeIPA-users wrote: On 04.11.22 15:32, Brendan Kearney via FreeIPA-users wrote: If you dont own the DNS service and records, then i am willing t

[Freeipa-users] Re: LoadBalancer vs. DNS

2022-11-04 Thread Brendan Kearney via FreeIPA-users
If you dont own the DNS service and records, then i am willing to bet you dont own the load balancers and their configs, either.  so the hurdle to overcome, engaging another team/department when needing a change, probably still exists. depending on the autonomy you are given over your

[Freeipa-users] bind-dyndb-ldap caching

2024-02-07 Thread brendan kearney via FreeIPA-users
i am using the bind-dyndb-ldap plugin on my internal authoritative dns servers, and have found that there is little to no caching going on in bind. i am looking to understand if this is misconfiguration on my part, or if this is a functional tradeoff when using a ldap backend. when i delete the