I'm struggling in regards of a proper practice for server setup for LDAP/AD authentication and NTP. I was thinking if asking two separate questions will be better but I think being a common problem here for two types of services would be a good reason to ask.
So, I have three domain controllers:
I want to use all of them for authentication and NTP synchronisation. Let's say I want to set up AD-based authentication on iLO (integrated Lights Out). I have to specify these servers and iLO lets me to do it one by one. This case is simple. Same goes for chronyd, I can specify multiple hosts, no problem.
What if a service does not let you to do so, for instance by letting you enter only one DC or NTP server? Can i make a set of A DNS entries named
dcs.test.internal and point each of them to
192.168.0.4? And set
dcs.test.internal as a Directory Server in iLO settings? What about NTP? I've read something about Anycast NTP but I am not sure where to go with it.