Hi /r/linuxadmin (xpost from sysadmin), we need help. We have been fighting this issue for months now with no resolve in sight.
We use FreeIPA for authentication, DNS, etc because we are an almost all Linux environment and it seemed like a great choice at the time.
We have a cluster of machines that all connect to the IPA to allow our users to authenticate to them. Problem is, some of our nodes keep "falling off" the ipa. A user will try to log in and suddenly they don't exist on the node anymore. It happens to random nodes and random users at random times. There's no consistency. Now we can rejoin the ipa from the node and everything is kosher again for a while. Then sometimes the next day, we'll have nodes that are no longer getting users from our ipa. We have no idea what's going on.
Do any of you know what's happening here?
[link] [comments]