Aaah, for me that is outside of my knowledge.

Regards
Angus

From: Todd Grayson via FreeIPA-users <freeipa-users@lists.fedorahosted.org>
Sent: Friday, March 6, 2020 11:31:36 PM
To: freeipa-users@lists.fedorahosted.org <freeipa-users@lists.fedorahosted.org>
Cc: Todd Grayson <tgrayson@cloudera.com>
Subject: [Freeipa-users] Re: freeIPA in a complex multi-subnet, multi-domain, multi-identity provider lab environment
 
Thanks Rob,  Thanks Angus,

I am aware of how to point the client to the specific IPA server, what I'm struggling more with is freeIPA in an environment where its not using DNS for domain and realm resolution for kerberos, which does work today. 
I should have limited my question to the following:

Is it possible to use ipaClient but manage static mappings in the krb5.conf [realm] and [domain realm] and run with dns_lookup_kdc=false and dns_lookup_realm=false (including the krb5.conf on the ipa server itself so its aware of all).  The question from Angus makes me believe that having the dns_lookup* = false is a unsupported context in an IPA environment.

Thanks for your feedback.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.fedoraproject.org%2Fen-US%2Fproject%2Fcode-of-conduct%2F&amp;data=02%7C01%7C%7C6d5c12bb19d74538cccc08d7c21e319f%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637191307245791585&amp;sdata=VApA4XyNHNHRrlkjbMXjyPD8C2wP2ISlrJZYGFBxIE0%3D&amp;reserved=0
List Guidelines: https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Ffedoraproject.org%2Fwiki%2FMailing_list_guidelines&amp;data=02%7C01%7C%7C6d5c12bb19d74538cccc08d7c21e319f%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637191307245791585&amp;sdata=XWHZFHKCEGlkq0KNerNLtK0MbnHDlaAqxt%2FqKFYpc7Y%3D&amp;reserved=0
List Archives: https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.fedorahosted.org%2Farchives%2Flist%2Ffreeipa-users%40lists.fedorahosted.org&amp;data=02%7C01%7C%7C6d5c12bb19d74538cccc08d7c21e319f%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637191307245791585&amp;sdata=hpVkU7jFfhRgCbNtXoiZUuXoOB6TsxsnMcyRgKnbLDI%3D&amp;reserved=0