Charles Hedrick via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org>
We currently do rsync backups of our server. On an MIT server, you’d
want to omit the stash file. But IPA doesn’t use that. Is there
anything like that that should be omitted? I’m not sure just how
freeipa bootstraps trust when it starts up.
In IPA, we're storing all Kerberos data in LDAP (389ds with a custom
KDB). So you'll want to be careful around that - I can't speak to how
the LDAP storage works, though.