Re: [Freeipa-users] Disaster Recovery Best Practices?

2012-04-20 Thread Brian Cook
On Apr 16, 2012, at 12:40 PM, Dmitri Pal wrote: 2) What is everyone else doing to prepare IPA for a DR? I've read that the best way to do it is to turn off the IPA services on a replica and then back that replica up. I also read that this will miss some important files that only exist on

Re: [Freeipa-users] Disaster Recovery Best Practices?

2012-04-20 Thread Rich Megginson
On 04/20/2012 08:46 AM, Brian Cook wrote: On Apr 16, 2012, at 12:40 PM, Dmitri Pal wrote: 2) What is everyone else doing to prepare IPA for a DR? I've read that the best way to do it is to turn off the IPA services on a replica and then back that replica up. I also read that this will miss

Re: [Freeipa-users] Disaster Recovery Best Practices?

2012-04-20 Thread Dmitri Pal
On 04/20/2012 11:47 AM, Rich Megginson wrote: On 04/20/2012 08:46 AM, Brian Cook wrote: On Apr 16, 2012, at 12:40 PM, Dmitri Pal wrote: 2) What is everyone else doing to prepare IPA for a DR? I've read that the best way to do it is to turn off the IPA services on a replica and then back

Re: [Freeipa-users] Disaster Recovery Best Practices?

2012-04-16 Thread Dmitri Pal
On 04/16/2012 03:13 PM, KodaK wrote: Hi, I have googled around a bit, but I still have a couple of questions: 1) is it possible to get getent shadow to return shadow entries from the ipa server? This is so we can do a DR test on some server or set of servers without also having to restore

Re: [Freeipa-users] Disaster Recovery Best Practices?

2012-04-16 Thread Simo Sorce
On Mon, 2012-04-16 at 14:13 -0500, KodaK wrote: Hi, I have googled around a bit, but I still have a couple of questions: 1) is it possible to get getent shadow to return shadow entries from the ipa server? No, we do not have any shadow map in ipa, enforcement of password and account