[Freeipa-users] Re: FreeIPA for the maximally paranoid and overworked?

2019-01-13 Thread K. M. Peterson via FreeIPA-users
Charles, Helpful fo know. The snapshot methodology is what we’ve done as well, though we haven’t yet put it fully into production; I’ll still hold my breath if we need it, but it’s good to hear it has worked for you. Thanks! On Wed, Jan 9, 2019 at 13:28 Charles Hedrick wrote: > Rob mentioned

[Freeipa-users] Re: FreeIPA for the maximally paranoid and overworked?

2019-01-09 Thread Charles Hedrick via FreeIPA-users
Rob mentioned issues with restoring data for one entry. We run on VMs, and periodically take snapshots. We can copy a snapshot to a new VM. Since the hostname is critical, edit /etc/hosts and add an entry for the new IP address giving it the original hostname. That way the system will think

[Freeipa-users] Re: FreeIPA for the maximally paranoid and overworked?

2019-01-09 Thread K. M. Peterson via FreeIPA-users
Rob, Thanks for your response, it was very helpful! A monitoring tool would be great, I should say that I am sleeping better because I'm getting to the point where I can at least back-out things when there's that kind of failure. It sounds like the level of caution that I've applied to this is

[Freeipa-users] Re: FreeIPA for the maximally paranoid and overworked?

2019-01-08 Thread Rob Crittenden via FreeIPA-users
K. M. Peterson via FreeIPA-users wrote: > Hi all, > > This is a newbie question with respect to FreeIPA, and I haven't seen > this elsewhere, so I thought I'd ask. > > I've just cleaned up an issue with trying to implement a new replica on > our domain, and I've realized that there are a couple