Thanks a lot. I followed Alex's advice and it's all good now. Very much appreciated! <div class="gmail_quote">On Jun 13, 2013 9:33 AM, "Jakub Hrozek" <<a href="mailto:jhrozek@redhat.com">jhrozek@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> On Thu, Jun 13, 2013 at 01:26:54AM +0300, Alexander Bokovoy wrote: > On Wed, 12 Jun 2013, Sina Owolabi wrote: > >Thank you for the reply Alex, though I'm a little confused that I am > >answering the correct email. > >I have taken a look at the example sssd.conf you advised, and I'm a little > >curious if the configuration supports having multiple IPA servers? I have a > >multi-master setup with two servers. I tried to add both servers to the > >ldap uri and to the krb5 section byt the service refused to start. > See man sssd-ldap(5). ldap_uri accepts comma-separated list of servers. > Same for krb5_server, see sssd-krb5(5). Also if you're using service DNS records, you can either leave the URIs blank and default to service resolution or explicitly use service resolution along with a hardcoded name: ldap_uri = _srv_, ldap://<a href="http://ldap.example.com" target="_blank">ldap.example.com</a> See the "service discovery" section in the man pages. _______________________________________________ Freeipa-users mailing list <a href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> </blockquote></div>