thanks for the info Simo!
I work at a university and the current structure is:
a meta-directory that feeds a master 389-ds, and the master replicates the
data to two read-only directories, that are accessible to customers.
any changes in the directory should be sent to the meta-directory, which will
apply the changes on the master.
Now I'm studying FreeIPA to see a possible exchange of 389DS for
FreeIPA (primarily
by trust with ad).
This is not an appropriate structure for FreeIPA(nor a directory actually) but
a read-only FreeIPA would be best for us.

Thanks a lot,

On Wed, Nov 14, 2012 at 12:07 PM, Simo Sorce <> wrote:

> On Wed, 2012-11-14 at 11:54 -0200, Andre Rodrigues wrote:
> > Hi,
> > I'm trying to setup replicas from my ipa server and
> > "ipa-replica-install" is based on multimaster replication.
> > Is there a way to set a ipa replica to be a slave/read-only?
> >
> No,at the moment replicas are full masters, we are investigating how to
> create read-only replicas in the future, but it will be a while.
> What is the reason you'd like a read-only replica ? Knowing use cases
> will help us decide how read-only replicas will need to behave in
> general.
> Simo.
> --
> Simo Sorce * Red Hat, Inc * New York
Freeipa-users mailing list

Reply via email to