Description of problem:
When adding an IPA domain, DNS is only used for the IPA host discovery, after which we hardcode the address of the IPA server in krb5.conf (under /etc/ovirt-engine).
This means if the IPA host is down or moved, we will not be able to authenticate, even if there are available replicas serving IPA to the network.
Version-Release number of selected component (if applicable):
rhevm-3.1.0-21.el6ev.noarch.rpm
How reproducible:
always
Steps to Reproduce:
1. install rhev-m
2. connect to an IPA domain
3. check /etc/ovirt-engine/krb5.conf under [realms]
Actual results:
hardcoded hostname:port for available DC
Expected results:
Should be using DNS SRV records instead of hardcoded DC names
Additional info: