Hello, FreeIPA list.

We're looking to start using FreeIPA to replace our standard 389 LDAP server on 
our public web server.

That public web server also houses a public wiki, which currently authenticates 
against 389. We're running FreeIPA on site in our hackerspace, but are working 
toward a goal of a federated login system between all of our public and 
internal systems.

My plan, as it stands, is to set up a VPN link between our public web server 
and our space, and set up a master-master replication between a FreeIPA server 
running onsite, and another on our public web server.

The limitation I'm currently considering is that our public web server is 
limited on resources - it's a VM with 1GB of RAM, on which we're already 
running Apache, Mediawiki, and an IRC bot. The VM is currently donated by a 
member. We're a little crunched on resources as it is, and I fear that spinning 
up a full FreeIPA replica on that system may push us over the edge of resource 

Is it possible to tune FreeIPA to run with fewer resources, or replicate only 
the portions of it that we really need running remotely (just the LDAP server)? 


Christopher Swingler
South Side Hackerspace Chicago
2233 South Throop St | Unit 214 | Chicago, IL 60608

Freeipa-users mailing list

Reply via email to