Hello !

I send you this mail because I have a question with the command line of IPA and the high availability of IPA.

I have the following setup :
When I installed ipa clients with ipa-client-install, I specified both IPA servers.
Yesterday, S1 crashed.

On one of the client, the command line was not working anymore.

ipa user-show myuser

ipa: ERROR: cannot connect to 'ldapi://%2fvar%2frun%2fslapd-MYREALM.socket':


It appears the command line use the following file to know which IPA server to contact :
/etc/ipa/default.conf

In this file, I saw that there was only S1 mentioned :

# cat /etc/ipa/default.conf

#File modified by ipa-client-install

 

[global]

basedn = dc=myrealm

realm = MYREALM

domain = mydomain.com

server = S1.mydomain.com

xmlrpc_uri = https://S1.mydomain.com/ipa/xml

enable_ra = True


Is it possible to benefit from high availability when we use IPA command line ?
If yes, how ?

Best regards.

Lune