Environment:
2 IPA Masters running Centos 8 and IPA Server 4.8.0.13
Client running Lentos 8 and IPA Client 4.8.0.13

The masters were setup as MultiMasters (I think I have it correct).

If I shutdown the first master (ipa01) so only ipa02 is running then try to login to the client I cannot. Found I needed to add both hosts to the IPA_server line in the SSSD.conf under the domain section to make that work.

Now if I try to add a user via the command line on the client I get the following error:
ipa: ERROR: cannot connect to 'https://ipa01.bos1.domain.com/ipa/json': [Errno 113] No route to host

Do I need to list both IPA servers some where else?  If so where?  I did try adding both IPA servers on the URL line of openldap.conf (only ipa01 was listed).

Louis
-<<—->>-
Louis Bohm
louisbohm@gmail.com