If A and PTR record for a replica are wrong as soon as we switch to GSSAPI agreements then replication will stop working. We should probably check that both replica resolve properly both direct and reverse and fail install with a clear message if they are not. We should probably work ok if /etc/hosts is fine (as that what libgssapi would end up looking into), but we should probably still do lookup in DNS (if the master/replica has DNS installed) just to make sure clients will be able to work as well.
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=833514
master: 230261a
ipa-3-0: 4e53905
Metadata Update from @simo: - Issue assigned to pviktori - Issue set to the milestone: FreeIPA 3.0 RC1
Login to comment on this ticket.