[Freeipa-users] Manage records while primary IPA is down

2014-01-13 Thread Dimitar Georgievski
This question is really about HA of FreeIPA. I've noticed that new records cannot be added on the replica server while the primary is down. Ideally these services should be always available even when the Primary server is down (for maintenance or other reasons). Is it possible to have another

Re: [Freeipa-users] Manage records while primary IPA is down

2014-01-13 Thread Rob Crittenden
Dimitar Georgievski wrote: This question is really about HA of FreeIPA. I've noticed that new records cannot be added on the replica server while the primary is down. Ideally these services should be always available even when the Primary server is down (for maintenance or other reasons). Is

Re: [Freeipa-users] Manage records while primary IPA is down

2014-01-13 Thread Dmitri Pal
On 01/13/2014 01:33 PM, Rob Crittenden wrote: Dimitar Georgievski wrote: This question is really about HA of FreeIPA. I've noticed that new records cannot be added on the replica server while the primary is down. Ideally these services should be always available even when the Primary server

Re: [Freeipa-users] Manage records while primary IPA is down

2014-01-13 Thread Dimitar Georgievski
I was referring to user accounts, and I believe they require certificates. With the Primary IPA being down I was not able to create new user entries on the replica servers. Hopefully the CA fail-over requirement is addressed in a new release of FreeIPA. Thanks, Dimitar On Mon, Jan 13, 2014 at

Re: [Freeipa-users] Manage records while primary IPA is down

2014-01-13 Thread Dmitri Pal
On 01/13/2014 03:01 PM, Dimitar Georgievski wrote: I was referring to user accounts, and I believe they require certificates. With the Primary IPA being down I was not able to create new user entries on the replica servers. Hm? What kind of error you get? What does HTTP log shows on the