Re: [Freeipa-users] The concept of sites...

2011-10-20 Thread Ondrej Valousek
From: Sigbjorn Lie [sigbj...@nixtra.com] Sent: Thursday, 20 October 2011 9:11 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: RE: [Freeipa-users] The concept of sites... I see your point with a messy dns infrastructure, however this would happen

Re: [Freeipa-users] The concept of sites...

2011-10-20 Thread Sigbjorn Lie
...@nixtra.com] Sent: Thursday, 20 October 2011 9:11 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: RE: [Freeipa-users] The concept of sites... I see your point with a messy dns infrastructure, however this would happen in the background. You would still only have one kerberos realm

Re: [Freeipa-users] The concept of sites...

2011-10-20 Thread Ondrej Valousek
, NZ 0064 4 463 6272 From: Sigbjorn Lie [sigbj...@nixtra.com] Sent: Thursday, 20 October 2011 9:11 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: RE: [Freeipa-users] The concept of sites... I see your point with a messy dns infrastructure

Re: [Freeipa-users] The concept of sites...

2011-10-19 Thread Dmitri Pal
On 10/19/2011 03:14 PM, Sigbjorn Lie wrote: Hi, Has there been given any thought to the concept of sites within IPA to improve cross-site implementations? This should be easy to implement as you are already using DNS SRV records to locate the ldap/kerberos servers. E.g. Site: Boston

Re: [Freeipa-users] The concept of sites...

2011-10-19 Thread Simo Sorce
On Wed, 2011-10-19 at 15:24 -0400, Dmitri Pal wrote: On 10/19/2011 03:14 PM, Sigbjorn Lie wrote: Hi, Has there been given any thought to the concept of sites within IPA to improve cross-site implementations? This should be easy to implement as you are already using DNS SRV records to

Re: [Freeipa-users] The concept of sites...

2011-10-19 Thread Sigbjorn Lie
I see your point with a messy dns infrastructure, however this would happen in the background. You would still only have one kerberos realm per IPA instance. Rgds, Siggi On Wed, October 19, 2011 21:30, Steven Jones wrote: Hi, I think AD sort of does this which they have now backed away

Re: [Freeipa-users] The concept of sites...

2011-10-19 Thread Steven Jones
- Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Sigbjorn Lie [sigbj...@nixtra.com] Sent: Thursday, 20 October 2011 9:11 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: RE: [Freeipa-users] The concept of sites... I see your

Re: [Freeipa-users] The concept of sites...

2011-10-19 Thread Sigbjorn Lie
On Wed, October 19, 2011 21:27, Simo Sorce wrote: On Wed, 2011-10-19 at 15:24 -0400, Dmitri Pal wrote: On 10/19/2011 03:14 PM, Sigbjorn Lie wrote: Hi, Has there been given any thought to the concept of sites within IPA to improve cross-site implementations? This should be easy to

Re: [Freeipa-users] The concept of sites...

2011-10-19 Thread Sigbjorn Lie
: freeipa-users@redhat.com Subject: RE: [Freeipa-users] The concept of sites... I see your point with a messy dns infrastructure, however this would happen in the background. You would still only have one kerberos realm per IPA instance. Rgds, Siggi On Wed, October 19, 2011 21:30