I'm looking into setting up a Samba file server with FreeIPA as the
password backend. I don't need fancy stuff, just plain LDAP password
(my first thought was using PAM as the LDAP frontend but apparently this
does not work for Samba...)
All the tutorials I've looked into mention the need to update the LDAP
schema in FreeIPA as a part of the procedure. I'm not really keen on
doing this, at least not in my production FreeIPA cluster, so I thought
of setting up a test FreeIPA installation that would only replicate data
from the FreeIPA "master" but not the either way around.
My problem is that I can't find any way of doing this except by creating
the replica and then deleting the test replica from the FreeIPA topology
- basically creating a non-updating stand-alone copy of my production
Is there a way to force a one-way replication?
(I'd also be grateful for any mentions of less painful ways of
connecting samba to freeipa :))
System administrator at ComeOn!
Freeipa-users mailing list