Hello,
I have 2 FreeIPA servers placed in 2 AWS placement groups (AZ1, AZ2).
I want to register my hosts in the IPA Server of the same placement group.
Using dig I get the following:
dig +short -t SRV
_ldap._tcp.example.com.
_ldap._tcp.AWS-eu-west-1a._locations.example.com.
50 100 389
euw1-prd-l-ipa02.example.com.
0 100 389
euw1-prd-l-ipa01.example.com.
which, at least in my eyes, means that I have an LDAP server in a location. So, if I
search this location I will get only ONE LDAP (or kerberos, it's the same) server.
But no:
dig +short -t SRV
_ldap._tcp.AWS-eu-west-1a._locations.example.com.
50 100 389
euw1-prd-l-ipa02.example.com.
0 100 389
euw1-prd-l-ipa01.example.com.
Now, I have some issues with this:
Why do I have BOTH IPA servers in ONE location, since I have set only one of them in the
specific location? Replication has nothing to do with it, we talk about the host of the
location!
If this a cognitive decision to add all replicated IPA servers to all locations? If so,
why?
Finally, is there any way to I get the IPA server(s) of a specific location?
(My understanding is that we don't have the SUBNET entries as in IPA 2.x series and
this is handled automatically with service discovery).