Re: [Freeipa-users] The concept of sites...

2011-10-20 Thread Ondrej Valousek
From: Sigbjorn Lie [sigbj...@nixtra.com] Sent: Thursday, 20 October 2011 9:11 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: RE: [Freeipa-users] The concept of sites... I see your point with a messy dns infrastructure, however this would happen

Re: [Freeipa-users] The concept of sites...

2011-10-20 Thread Sigbjorn Lie
...@nixtra.com] Sent: Thursday, 20 October 2011 9:11 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: RE: [Freeipa-users] The concept of sites... I see your point with a messy dns infrastructure, however this would happen in the background. You would still only have one kerberos realm

Re: [Freeipa-users] The concept of sites...

2011-10-20 Thread Ondrej Valousek
, NZ 0064 4 463 6272 From: Sigbjorn Lie [sigbj...@nixtra.com] Sent: Thursday, 20 October 2011 9:11 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: RE: [Freeipa-users] The concept of sites... I see your point with a messy dns infrastructure

[Freeipa-users] The concept of sites...

2011-10-19 Thread Sigbjorn Lie
Hi, Has there been given any thought to the concept of sites within IPA to improve cross-site implementations? This should be easy to implement as you are already using DNS SRV records to locate the ldap/kerberos servers. E.g. Site: Boston Site: London Create a subdomain of the IPA dns

Re: [Freeipa-users] The concept of sites...

2011-10-19 Thread Dmitri Pal
On 10/19/2011 03:14 PM, Sigbjorn Lie wrote: Hi, Has there been given any thought to the concept of sites within IPA to improve cross-site implementations? This should be easy to implement as you are already using DNS SRV records to locate the ldap/kerberos servers. E.g. Site: Boston

Re: [Freeipa-users] The concept of sites...

2011-10-19 Thread Simo Sorce
On Wed, 2011-10-19 at 15:24 -0400, Dmitri Pal wrote: On 10/19/2011 03:14 PM, Sigbjorn Lie wrote: Hi, Has there been given any thought to the concept of sites within IPA to improve cross-site implementations? This should be easy to implement as you are already using DNS SRV records to

Re: [Freeipa-users] The concept of sites...

2011-10-19 Thread Sigbjorn Lie
...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Sigbjorn Lie [sigbj...@nixtra.com] Sent: Thursday, 20 October 2011 8:14 a.m. To: freeipa-users@redhat.com Subject: [Freeipa-users] The concept of sites... Hi, Has there been given any thought to the concept of sites within

Re: [Freeipa-users] The concept of sites...

2011-10-19 Thread Steven Jones
- Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Sigbjorn Lie [sigbj...@nixtra.com] Sent: Thursday, 20 October 2011 9:11 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: RE: [Freeipa-users] The concept of sites... I see your

Re: [Freeipa-users] The concept of sites...

2011-10-19 Thread Sigbjorn Lie
On Wed, October 19, 2011 21:27, Simo Sorce wrote: On Wed, 2011-10-19 at 15:24 -0400, Dmitri Pal wrote: On 10/19/2011 03:14 PM, Sigbjorn Lie wrote: Hi, Has there been given any thought to the concept of sites within IPA to improve cross-site implementations? This should be easy to

Re: [Freeipa-users] The concept of sites...

2011-10-19 Thread Sigbjorn Lie
: freeipa-users@redhat.com Subject: RE: [Freeipa-users] The concept of sites... I see your point with a messy dns infrastructure, however this would happen in the background. You would still only have one kerberos realm per IPA instance. Rgds, Siggi On Wed, October 19, 2011 21:30