Hi,
I'm looking for a way to set up a small office.
I'm trying not to have to have all the clients SSSD back to the central office.
It would be nice to be able to have a small FreeIPA server, and just pull in the necessary
user data from the central servers.
But it's not clear what the best way to do that would be.
A replica seems like overkill - and forces the central servers to trust the small office,
which isn't ideal.
Some sort of selective one-way replication would work.
What would be nice would be if the small office FreeIPA server could retrieve user data as
needed, and then cache it, a bit like SSSD does for clients.
Some sort of filtered export/import would also be acceptable, so long as we can be
sufficiently confident about security of key material.
Any suggestions?
Regards, Ben
Show replies by date