seems
open and no progress for ages now....
Winfried
Op 06-04-18 om 13:57 schreef Florence Blanc-Renaud via FreeIPA-users:
On 04/06/2018 12:10 PM, Angus Clarke via FreeIPA-users wrote:
> Hi
>
> Is there way to lock down a FreeIPA replica so that it can only
> receive updates but not make changes to other FreeIPA systems.
>
> Some of our environments are considered less secure than others, our
> security team are concerned that a FreeIPA in a less secure
> environment might become compromised at which point unwarranted
> changes could be applied that affect our secure production environments.
>
> Thanks a lot
> Angus
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to
> freeipa-users-leave(a)lists.fedorahosted.org
>
Hi,
unlike 389-ds, FreeIPA currently supports only read-write replicas. An
RFE is already tracking this request for read-only replicas, see [1].
HTH,
Flo
[1]
https://pagure.io/freeipa/issue/5569
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org