Hi Francois,
You do not need to add SRV records, this is difficult to manage in
the long run.
ipa-client-install(1) covers this scenario with the --domain=DOMAIN parameter.
See also
https://bugzilla.redhat.com/show_bug.cgi?id=1385515#c14 for a
detailed explanation.
Well, that is not enough in my case... It is not a problem to detect the domain. The
problem is that existing SRV records in the main domain contain IPA server hostname that
is resolvable to site1-internal IP address. And I must keep it this way, for the clients
inside site1.
But I can't reach those IP addresses from site2. So in order to create a replica in
site2, I have to "trick" it with the new SRV records, pointing to the new DNS
name that resolves to the external IP on the external NIC of the site1-IPA server...
Except, of course, that even that trick didn't work, due to HTTP Referal mismatch...
---
Regards,
Dmitry Perets