Hello

I am sorry, I am not sure but if your client hostname is within
correct domain, I think you dont need to give domain & realm.

like your IPA domain & realm is dataservice.net & your client hostname
is system2.dataservice.net, I think it will take it automatically,
Someone else can confirm.

Please test this locally.


Regards
Arpit Tolani

On Mon, Jun 12, 2017 at 4:25 PM, wenxing zheng <wenxing.zheng@gmail.com> wrote:
> so we can safely ignore the --server option for the ipa-client-install? but
> the --domain and --realm are mandatory?
>
> Many thanks to Arpit.
>
> On Mon, Jun 12, 2017 at 6:51 PM, Arpit Tolani <arpittolani@gmail.com> wrote:
>>
>> Hello
>>
>> Try to run below commands on your IPA client & point resolv.conf to
>> IPA server & IPA client
>>
>> # dig srv _ldap._tcp.dataservice.net
>> # dig srv _kerberos._tcp.dataservice.net
>> # dig srv _kpasswd._tcp.dataservice.net
>>
>>
>> If they return your IPA servers, It can automatically figure out your
>> IPA servers using DNS resolver
>>
>>
>> Regards
>> Arpit Tolani
>>
>> On Mon, Jun 12, 2017 at 4:17 PM, wenxing zheng <wenxing.zheng@gmail.com>
>> wrote:
>> > I setup a IPA server: freeipa-server and a replica: freeipa-replica,
>> > both
>> > with embedded DNS. I have 2 server addresses:
>> > freeipa-server.dataservice.net
>> > and freeipa-replica.dataservice.net.
>> >
>> > When I am configuring the IPA client using the ipa-client-install, how
>> > to
>> > specify the "--server" option? or it can automatically figure out the
>> > server
>> > via the DNS resolver?
>> >
>> > Thanks, Wenxing
>> >
>> > On Mon, Jun 12, 2017 at 6:36 PM, Arpit Tolani <arpittolani@gmail.com>
>> > wrote:
>> >>
>> >> Hello
>> >>
>> >> > Can you help to shed more lights on how to configure the SRV records
>> >> > for
>> >> > auto discovery?
>> >> >
>> >>
>> >> When ipa-server is setup with embedded DNS (using --setup-dns ) SRV
>> >> records are automatically added in IPA.
>> >>
>> >> If its external DNS server, You need to add records something like
>> >> this in your DNS server.
>> >>
>> >> _ldap._tcp.example.com. 86400   IN      SRV     0 100 389
>> >> ipaserver1.example.com.
>> >> _kerberos._tcp.example.com. 86400 IN    SRV     0 100 88
>> >> ipaserver1.example.com.
>> >> _kerberos._udp.example.com. 86400 IN    SRV     0 100 88
>> >> ipaserver1.example.com.
>> >> _kpasswd._tcp.example.com. 86400 IN     SRV     0 100 464
>> >> ipaserver1.example.com.
>> >> _kpasswd._udp.example.com. 86400 IN     SRV     0 100 464
>> >> ipaserver1.example.com.
>> >>
>> >> After this client will auto discover IPA server which is providing
>> >> LDAP & Kerberos information.
>> >>
>> >>
>> >> Regards
>> >> Arpit Tolani
>> >
>> >
>>
>>
>>
>> --
>> Thanks & Regards
>> Arpit Tolani
>
>



--
Thanks & Regards
Arpit Tolani