Re: [Freeipa-users] replica read-only

2012-11-15 Thread Steven Jones
-users] replica read-only On Wed, 2012-11-14 at 11:54 -0200, Andre Rodrigues wrote: Hi, I'm trying to setup replicas from my ipa server and ipa-replica-install is based on multimaster replication. Is there a way to set a ipa replica to be a slave/read-only? No,at the moment replicas are full

Re: [Freeipa-users] replica read-only

2012-11-15 Thread Steven Jones
November 2012 7:36 a.m. To: Brian Cook Cc: Andre Rodrigues; freeipa-users@redhat.com Subject: Re: [Freeipa-users] replica read-only On Wed, 2012-11-14 at 10:26 -0800, Brian Cook wrote: Having a read-only replica would be ideal for placement in a DMZ. See active directory's read-only domain

Re: [Freeipa-users] replica read-only

2012-11-14 Thread Simo Sorce
On Wed, 2012-11-14 at 11:54 -0200, Andre Rodrigues wrote: Hi, I'm trying to setup replicas from my ipa server and ipa-replica-install is based on multimaster replication. Is there a way to set a ipa replica to be a slave/read-only? No,at the moment replicas are full masters, we are

Re: [Freeipa-users] replica read-only

2012-11-14 Thread Brian Cook
Having a read-only replica would be ideal for placement in a DMZ. See active directory's read-only domain controller introduced in 2008 R2 for just that use case. -Brian On Nov 14, 2012, at 6:07 AM, Simo Sorce s...@redhat.com wrote: On Wed, 2012-11-14 at 11:54 -0200, Andre Rodrigues wrote:

Re: [Freeipa-users] replica read-only

2012-11-14 Thread Simo Sorce
On Wed, 2012-11-14 at 10:26 -0800, Brian Cook wrote: Having a read-only replica would be ideal for placement in a DMZ. See active directory's read-only domain controller introduced in 2008 R2 for just that use case. Hi Brian, yes we know about the DMZ use case, but that one goes beyond just