On ti, 22 joulu 2020, Juarez Souza Junior via FreeIPA-users wrote:
Hi All! So I'm trying to deploy FreeIPA Servers (with integrated
DNS
Server) in a domain and subdomain with the same user realm.
Anyone knows if it would be possible to deploy FreeIPA servers in different
domains but sharing the same realm?
How could I deploy a replica without enrolling it to the same domain of the
master server?
For example:
IPA Server -> realm: TEST.LOCAL domain: test.local (10.1.1.0/24)
REPLICA -> realm: TEST.LOCAL domain: app.test.local (10.1.2.0/24)
My problem is: I'm working on a project where I have multiple domains (app,
sec, dev and etc) and I need centralized user authentication for each
domain zone.
I did some test labs without success. (mainly with the replica)
I hope someone could give me a direction.
What exactly did you try?
Look at this list archives, this is one of often asked questions. You
*should not* specify --domain option to ipa-client-install to be your
client's domain: e.g. not --domain=app.test.local but instead
--domain=test.local. The hostname can be in any domain, as long as that
domain zone exists in DNS and if that domain zone is not managed by IPA
DNS server, then the host-to-be-enrolled hostname exists in that zone.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland