This question is really about HA of FreeIPA. I've noticed that new records
cannot be added on the replica server while the primary is down.
Ideally these services should be always available even when the Primary
server is down (for maintenance or other reasons).
Is it possible to have another Primary server replicating with the first
Primary or to use one of the Replica servers to manage records while the
Primary server is down.
Freeipa-users mailing list