Re: [Freeipa-users] RoundRobin - Cname - 2 servers with same services

2016-04-25 Thread Gady Notrica
Thank you guys.

Gady Notrica 

-Original Message-
From: freeipa-users-boun...@redhat.com 
[mailto:freeipa-users-boun...@redhat.com] On Behalf Of Petr Spacek
Sent: April 25, 2016 4:37 AM
To: freeipa-users@redhat.com
Subject: Re: [Freeipa-users] RoundRobin - Cname - 2 servers with same services

On 22.4.2016 16:41, Martin Basti wrote:
> 
> 
> On 22.04.2016 16:00, Gady Notrica wrote:
>>
>> Hello World,
>>
>> I am trying to enable roundrobin on freeipa. I have 2 servers 
>> providing same service (http). I am trying to give it a friendly name 
>> so that when user what to access it, they can land on any one of the 2 
>> servers.
>>
>> But IPA dns doesn't want to let me create CName that has the same 
>> name but 2 different destination.
>>
>> How do I go around this?
>>
>> Thanks,
>>
>> Gady
>>
>>
>>
> Hello,
> 
> you don't, ldapschema limits CNAME to just one value in IPA
> 
> It is possible with BIND9.1+ to have multiple CNAMEs ?
> http://docstore.mik.ua/orelly/networking_2ndEd/dns/ch10_07.htm
> 
> Anyway this is violation of RFC.
> 
> You should use for load balancing A records.

To be absolutely sure I tried to put two CNAME records to one node. BIND 9.10 
refuses to load the zone and gives following error:

zone t1.test/IN: loading from master file t1.db failed: multiple RRs of 
singleton type zone t1.test/IN: not loaded due to errors.

So does IPA.

--
Petr^2 Spacek

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] RoundRobin - Cname - 2 servers with same services

2016-04-25 Thread Petr Spacek
On 22.4.2016 16:41, Martin Basti wrote:
> 
> 
> On 22.04.2016 16:00, Gady Notrica wrote:
>>
>> Hello World,
>>
>> I am trying to enable roundrobin on freeipa. I have 2 servers providing same
>> service (http). I am trying to give it a friendly name so that when user
>> what to access it, they can land on any one of the 2 servers.
>>
>> But IPA dns doesn’t want to let me create CName that has the same name but 2
>> different destination.
>>
>> How do I go around this?
>>
>> Thanks,
>>
>> Gady
>>
>>
>>
> Hello,
> 
> you don't, ldapschema limits CNAME to just one value in IPA
> 
> It is possible with BIND9.1+ to have multiple CNAMEs ?
> http://docstore.mik.ua/orelly/networking_2ndEd/dns/ch10_07.htm
> 
> Anyway this is violation of RFC.
> 
> You should use for load balancing A records.

To be absolutely sure I tried to put two CNAME records to one node. BIND 9.10
refuses to load the zone and gives following error:

zone t1.test/IN: loading from master file t1.db failed: multiple RRs of
singleton type
zone t1.test/IN: not loaded due to errors.

So does IPA.

-- 
Petr^2 Spacek

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] RoundRobin - Cname - 2 servers with same services

2016-04-22 Thread Martin Basti



On 22.04.2016 16:00, Gady Notrica wrote:


Hello World,

I am trying to enable roundrobin on freeipa. I have 2 servers 
providing same service (http). I am trying to give it a friendly name 
so that when user what to access it, they can land on any one of the 2 
servers.


But IPA dns doesn’t want to let me create CName that has the same name 
but 2 different destination.


How do I go around this?

Thanks,

Gady




Hello,

you don't, ldapschema limits CNAME to just one value in IPA

It is possible with BIND9.1+ to have multiple CNAMEs ? 
http://docstore.mik.ua/orelly/networking_2ndEd/dns/ch10_07.htm


Anyway this is violation of RFC.

You should use for load balancing A records.

Martin
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

[Freeipa-users] RoundRobin - Cname - 2 servers with same services

2016-04-22 Thread Gady Notrica
Hello World,

I am trying to enable roundrobin on freeipa. I have 2 servers providing same 
service (http). I am trying to give it a friendly name so that when user what 
to access it, they can land on any one of the 2 servers.

But IPA dns doesn't want to let me create CName that has the same name but 2 
different destination.

How do I go around this?

Thanks,

Gady

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project