Hi all. If I don't have freeipa dns and we use external DNS and I wanted to use _srv_ for all the clients to connect automatically when a master goes down what should I do on the DNS server?
I tried to have master1.mydom.test SRV replica1.mydon.test SRV etc etc... but I don't think is working
Cheers
On pe, 10 elo 2018, Alfredo De Luca via FreeIPA-users wrote:
Hi all. If I don't have freeipa dns and we use external DNS and I wanted to use _srv_ for all the clients to connect automatically when a master goes down what should I do on the DNS server?
With FreeIPA 4.4 or later there is a command
ipa dns-update-system-records --dry-run
which gives you a list of actual DNS entries that should exist. It does not include A/AAAA records for the masters but it has all SRV/TXT records needed (and A record for the CRL master, ipa-ca.$domain).
If you'd add --out=/some/file.txt, you'll get the output in nsupdate format.
Thanks Alex. I saw that command but I wasn't sure it was for External DNS too. cheers
/Alfredo
On Fri, 10 Aug 2018, 12:19 Alexander Bokovoy, abokovoy@redhat.com wrote:
On pe, 10 elo 2018, Alfredo De Luca via FreeIPA-users wrote:
Hi all. If I don't have freeipa dns and we use external DNS and I wanted to use _srv_ for all the clients to connect automatically when a master goes down what should I do on the DNS server?
With FreeIPA 4.4 or later there is a command
ipa dns-update-system-records --dry-run
which gives you a list of actual DNS entries that should exist. It does not include A/AAAA records for the masters but it has all SRV/TXT records needed (and A record for the CRL master, ipa-ca.$domain).
If you'd add --out=/some/file.txt, you'll get the output in nsupdate format.
-- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland
freeipa-users@lists.fedorahosted.org