<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Ideally I would rely on a -group- of servers, and then rely on DNS if it is down. I don't want to hammer one server. We're talking about 500-1000 servers running virtual machines, so potentially a lot of traffic. Got any suggestions for that? <div><br><div><div><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">---<br>Brian Cook<br>Solutions Architect, Red Hat, Inc.<br>407-212-7079</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br></div></span></div></span><br class="Apple-interchange-newline"></span><br class="Apple-interchange-newline">
</div>
<br><div><div>On Apr 13, 2012, at 12:30 PM, Rob Crittenden wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>Brian Cook wrote:<br><blockquote type="cite">Has anyone worked any magic to keep DNS, kerberos and LDAP request<br></blockquote><blockquote type="cite">routed to local servers in an IPA setup where topology is separated by<br></blockquote><blockquote type="cite">WAN links?<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">I have looked at things like doing sorts in the DNS client<br></blockquote><blockquote type="cite">configuration, BIND views, etc. but I would like to know if anyone else<br></blockquote><blockquote type="cite">has tried to tackle this issue.<br></blockquote><br>Which clients? For some things (logins, etc) you can reverse the order of the servers in /etc/sssd/sssd.conf so a fixed server comes before the _srv_ entry in ipa_server. This way you can point at a desired server but still be able to fall back to DNS if it is down.<br><br>rob<br></div></blockquote></div><br></div></div></div></body></html>