<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 10/11/2013 05:22 AM, Михаил А wrote:
<blockquote
cite="mid:CALtTMpJ09pF7R+ABngDDyNdPoxNLme-nZS3Ub+OYsi3WEvSmgg@mail.gmail.com"
type="cite">
<div dir="ltr">Good afternoon. In each region, I have a couple of
controllers (windows and ipa). With the authorization server in
the logs ipa (sssd log) I find that the request is not for the
neighbor by location windows server, and randomly throughout the
forest. Tell me is there a way to explicitly specify the IPA
server on windows DC. Logs attached.<br>
<div>there somewhere documentation about?<br>
</div>
</div>
</blockquote>
<br>
I am not quite sure I understand you setup but I will try to give
you some hints.<br>
<br>
If you want SSSD to access a specific IPA server or servers you can
define primary and secondary servers explicitly in the SSSD
configuration. See SSSD man pages.<br>
This can also be done via ipa-client-install command line starting
IPA client 3.0 and SSSD 1.9<br>
<br>
But that would sort of override the information coming from DNS.<br>
<br>
If you are looking for SSSD to support DNS sites then this
functionality is available in SSSD in 1.11 if SSSD is joined
directly to AD via AD provider. If you are looking for the same
functionality when SSSD connects to IPA then it is still on the
roadmap because IPA does not support sites.<br>
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/2008">https://fedorahosted.org/freeipa/ticket/2008</a><br>
<br>
<blockquote
cite="mid:CALtTMpJ09pF7R+ABngDDyNdPoxNLme-nZS3Ub+OYsi3WEvSmgg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div><br>
</div>
<div>
<div>next to the IPA server pk529ad-dc01.sys.local</div>
<div>IPA server and knocks pk429ad-dc01.sys.local to another
region</div>
</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>