[Freeipa-users] confused about replica role and use

[Petr Spacek]

On 14.12.2015 19:32, Karl Forner wrote:
> Hello,
> 
>>From what I understood, a freeipa replica server is a kind of backup of
> another freeipa server.
> Both are usable by clients, and they will dynamically update their
> information.
> 
> But I do not understand how a client will make use of the replica if the
> master server is down.
> Naively I would imagine, that like for DNS servers, that you configure a
> main freeipa server, and a secondary one in case the main one does not
> respond, but I can not find how to do it.
> Is this happening automagically ? Or this is not the way it is supposed to
> be used ?

All replicas should be listed in SRV records in DNS so clients will find them
automatically.

It should work out of the box if IPA manages primary DNS domain (--setup-dns
parameter for ipa-{server,replica}-install + DNS delegation). In other cases
you have to update SRV records manually.

-- 
Petr^2 Spacek