IPA/SSSD high availability setup for centralized sudo implementation

Solution Verified - Updated -

Issue

To make our IPA clients high available we use two IPA servers with replication, /etc/sssd/sssd.conf entries look like this:

ipa_server = _srv_, ldap1.server.lan, ldap1.server.lan
ldap_uri = ldap://ldap1.server.lan
krb5_server = ldap1.server.lan

The ipa_server entry is using _srv_ from the domain and the two servers hardcoded as a fallback. How can we alter ldap_uri & krb5_server entries to make them high available as well (preferably without any hardcoded entries.)

Environment

  • Red Hat Enterprise Linux 6
  • SSSD

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.