On Nov 5, 2019, at 2:25 AM, Florence Blanc-Renaud via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
As
a general rule, we recommend rebuilding from an existing replica, rather than using backup-restore.
Right. Our strategy is
* all of our systems are VMs. We take snapshots periodically. So in a failure we would start from a snapshot rather than trying to restore in some way. You could then reinitialize the data from another replica
* In general you should be able take a VM snapshot and start it. however I’ve noticed a tendency for /etc/dirsrv/slapd-NAME/dse.ldif to be missing. I now copy this file somewhere safe every few minutes with a cron job.