On 19 November 2015 at 15:27, Ondrej Valousek
<[email protected]> wrote:
> Hi list,
>
>
>
> How do I completely disable SRV lookups? This functionality is corrupted in
> SSSD so I wanted to disable it completely by defining ad servers
> explicitely:
>
>
>
>     ad_server = myserver1, myserver2
>
>     ldap_uri = ldap://myserver1, ldap://myserver2
>
>     subdomains_provider = none
>
>     ldap_use_tokengroups = False
>
>     ad_domain = TEST.COM

>From the sssd-ad man page:

       ad_enable_dns_sites (boolean)
           Enables DNS sites - location based service discovery.

           If true and service discovery (see Service Discovery
paragraph at the bottom of the man page) is enabled, the SSSD will
first
           attempt to discover the Active Directory server to connect
to using the Active Directory Site Discovery and fall back to the DNS
           SRV records if no AD site is found. The DNS SRV
configuration, including the discovery domain, is used during site
discovery as
           well.

           Default: true

John

-- 
John Beranek                         To generalise is to be an idiot.
http://redux.org.uk/                                 -- William Blake
_______________________________________________
sssd-users mailing list
[email protected]
https://lists.fedorahosted.org/admin/lists/[email protected]

Reply via email to