Hi,

IPA doesn't support read-only replica (see ticket https://pagure.io/freeipa/issue/5569), but has a notion of hidden replica (https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/installing_identity_management/installing-an-ipa-replica_installing-identity-management#installing-an-idm-hidden-replica_install-replica).

More details here: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/planning_identity_management/planning-the-replica-topology_planning-identity-management#the-hidden-replica-mode_planning-the-replica-topology

flo

On Thu, Mar 31, 2022 at 3:28 PM lejeczek via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Hi guys.

This must have been asked/covered somewhere I think, as it
must be trivial concept/question many must have wondered -
can IPA, in supported manner with built-in way or not, do
'geo-repliacation' in some sense?
What I wonder specifically is - call it a secondary, backup
or a mirror site(of whole domain) which would _only_
receive(possibly synchronously) and be read-only but!...
that direction, the flow of main/primary -> secondary/backup
could be flipped, reversed(in relatively non-time consuming way)
Anybody done or contemplated such or similar thing and care
to share some thoughts?

many thanks, L.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure