My enroll command: sudo ipa-client-install --fixed-primary --enable-dns-updates --server ipa.dom.loc --domain dom.loc --mkhomedir --force-join -p admin -w password -U ----client sssd.conf:
[domain/dom.loc] id_provider = ipa ipa_server = ipa. dom.loc ipa_domain = dom.loc ipa_hostname = desktoppc.dom.loc auth_provider = ipa chpass_provider = ipa access_provider = ipa cache_credentials = True ldap_tls_cacert = /etc/ipa/ca.crt dyndns_update = True dyndns_iface = ens18 krb5_store_password_if_offline = True [sssd] services = nss, pam, ssh, sudo domains = dom.loc [nss] homedir_substring = /home [pam] [sudo] [autofs] [ssh] [pac] [ifp] [session_recording] --------------- So, failover should be fine? -- _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
