Hello,
I have 2 FreeIPA servers placed in 2 AWS placement groups (AZ1, AZ2).
I want to register my hosts in the IPA Server of the same placement group.
Using dig I get the following:
dig +short -t SRV
_ldap._tcp.example.com.
_ldap._tcp.AWS-eu-west-1a._locations.example.com.
50 100 389
euw1-prd-l-ipa02.example.com.
0 100 389
euw1-prd-l-ipa01.example.com.
which, at least in my eyes, means that I have an LDAP server in a location. So, if I
search this location I will get only ONE LDAP (or kerberos, it's the same) server.
But no:
dig +short -t SRV
_ldap._tcp.AWS-eu-west-1a._locations.example.com.
50 100 389
euw1-prd-l-ipa02.example.com.
0 100 389
euw1-prd-l-ipa01.example.com.
Now, I have some issues with this:
Why do I have BOTH IPA servers in ONE location, since I have set only one of them in the
specific location? Replication has nothing to do with it, we talk about the host of the
location!
If this a cognitive decision to add all replicated IPA servers to all locations? If so,
why?
Finally, is there any way to I get the IPA server(s) of a specific location?
(My understanding is that we don't have the SUBNET entries as in IPA 2.x series and
this is handled automatically with service discovery).
it is
working as designed.
Locations are managed via SRV priority where 0 is preferred. The server
with priority 50 is a backup server.
rob