On Thu, Jul 27, 2017 at 02:19:38PM +0000, pgb205 via FreeIPA-users wrote:
Jacub, yes we do have a one way trust between AD->FreeIPA. That
explainswhy krb5.conf is used instead of the sssd.conf _srv_ to retrieve DNS records.
Can you also please comment on why I'm only getting lookups on the first two
kdc's listed in krb5.conf
I'm really not sure. I would say the same what Sumit did in his reply
(and he actually tested his setup) and same as Sumit, I'm not aware of
It would be nice to illustrate the problems you are seeing with logs..