the replica should be able to take over as master should master go offline.
Our replica was set up with CA & without DNS - the same as master, and it seems to be working on the whole.
The problem I'm having is in the replication.
create user on master:
ipa user-add master_test_user --first=MT --last=ML
create user on replica:
ipa user-add replica_test_user --first=RT --last=RL
find user on master:
[root@vmpr-linuxidm ~]# ipa user-find test_user
---------------
2 users matched
---------------
User login: master_test_user
First name: MT
Last name: ML
Home directory: /home/master_test_user
Login shell: /bin/bash
Principal name:
master_test_user@UNIX.DOMAIN.COM Principal alias:
master_test_user@UNIX.DOMAIN.COM Email address:
master_test_user@domain.com UID: 1718800021
GID: 1718800021
Account disabled: False
User login: replica_test_user
First name: RT
Last name: RL
Home directory: /home/replica_test_user
Login shell: /bin/bash
Principal name:
replica_test_user@UNIX.DOMAIN.COM Principal alias:
replica_test_user@UNIX.DOMAIN.COM Email address:
replica_test_user@domain.com UID: 1718850502
GID: 1718850502
Account disabled: False
----------------------------
Number of entries returned 2
----------------------------
find user on replica:
[root@vmdr-linuxidm ~]# ipa user-find test_user
--------------
1 user matched
--------------
User login: replica_test_user
First name: RT
Last name: RL
Home directory: /home/replica_test_user
Login shell: /bin/bash
Principal name:
replica_test_user@UNIX.DOMAIN.COM Principal alias:
replica_test_user@UNIX.DOMAIN.COM Email address:
replica_test_user@domain.com UID: 1718850502
GID: 1718850502
Account disabled: False
----------------------------
Number of entries returned 1
----------------------------
If I run ipa user-add on the replica, I see it upstream on master, but if I run ipa add-user on the master, that's not replicated down to the replica.