[Freeipa-users] One-way replication

[Dimitris Tsompanidis]

Hi all,

I'm looking into setting up a Samba file server with FreeIPA as the 
password backend. I don't need fancy stuff, just plain LDAP password 
authentication.

(my first thought was using PAM as the LDAP frontend but apparently this 
does not work for Samba...)

All the tutorials I've looked into mention the need to update the LDAP 
schema in FreeIPA as a part of the procedure. I'm not really keen on 
doing this, at least not in my production FreeIPA cluster, so I thought 
of setting up a test FreeIPA installation that would only replicate data 
from the FreeIPA "master" but not the either way around.

My problem is that I can't find any way of doing this except by creating 
the replica and then deleting the test replica from the FreeIPA topology 
- basically creating a non-updating stand-alone copy of my production 
servers.

Is there a way to force a one-way replication?

(I'd also be grateful for any mentions of less painful ways of 
connecting samba to freeipa :))

-- 
Dimitris Tsompanidis
System administrator at ComeOn!
dimitris.tsompanidis at comeon.com