Re: [Freeipa-users] Non-Prod instance

2013-02-27 Thread Martin Kosek
The main purpose of this isolation is that your production clients for example do not autodiscover testing IPA instance via DNS SRV records and do not use it instead of the production instance. Martin On 02/26/2013 09:43 PM, Guy Matz wrote: > Thanks! Is it a matter of isolating the networks? Or

Re: [Freeipa-users] Non-Prod instance

2013-02-26 Thread Guy Matz
Thanks! Is it a matter of isolating the networks? Or just making sure clients are pointing to the correct server? Thanks again, Guy On 02/26/2013 02:45 PM, Dmitri Pal wrote: On 02/25/2013 09:58 AM, Guy Matz wrote: Hello! Does anyone out there run two instances of freeipa, prod & non-prod i

Re: [Freeipa-users] Non-Prod instance

2013-02-26 Thread Dmitri Pal
On 02/25/2013 09:58 AM, Guy Matz wrote: > Hello! Does anyone out there run two instances of freeipa, prod & > non-prod instances? Are there any issues to be wary of in this > scenario? Any gotchas? Do you use the same realms & domain names > between instances? As long as you completely isolate

Re: [Freeipa-users] Non-Prod instance

2013-02-25 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/25/2013 02:58 PM, Guy Matz wrote: > Hello! Does anyone out there run two instances of freeipa, prod & non-prod > instances? Are there any issues to be wary of in this scenario? Any gotchas? Do you use the same realms & domain names between ins

[Freeipa-users] Non-Prod instance

2013-02-25 Thread Guy Matz
Hello! Does anyone out there run two instances of freeipa, prod & non-prod instances? Are there any issues to be wary of in this scenario? Any gotchas? Do you use the same realms & domain names between instances? Perhaps the fellow who upgraded his prod server to 6.4 might appreciate this