[Freeipa-users] Disaster Recovery Best Practices?

[Brian Cook]

On Apr 16, 2012, at 12:40 PM, Dmitri Pal wrote:

>> 2) What is everyone else doing to prepare IPA for a DR?  I've read
>> that the best way to do it is to turn off the IPA services on a
>> replica and then back that replica up.  I also read that this will
>> miss some important files that only exist on the master. 
> 
> That is the case when you use selfsigned cert but the preferred and
> default configuration is not with the self-signed certs. It was in the
> past but not any more. Currently when you install IPA and then replicas
> there is no difference between master and replicas (if you installed CA
> on the replica) so picking any one and recycling is possible. You won't
> loose anything. 

Can 389DS produce a full 'backup' in an LDIF of schema / objects while running?

-Brian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120420/70718cc4/attachment.htm>