<div class="gmail_quote"><span lang="en"><span><span lang="en"><span>thanks for the info</span><span> Simo!<br></span></span>I work</span> <span>at a university</span> <span>and the</span> <span>current structure is</span><span>:</span><br>

<span>a meta</span><span>-directory</span> <span>that feeds a</span> <span>master</span> <span>389-</span><span>ds</span><span>,</span> <span>and the master replicates</span> <span>the data to</span> <span>two read-only</span> <span>directories,</span> <span>that are accessible</span> <span>to customers.</span></span><br>

<span lang="en"><span lang="en"><span>any changes</span> <span>in the directory</span> <span>should be</span> <span>sent to the</span> <span>meta-</span><span>directory</span><span>, which</span> <span>will apply the</span> <span>changes on the master.<br>

</span></span><span>Now I</span><span>'m studying</span> <span>FreeIPA</span> <span>to see</span> <span>a possible exchange</span> <span>of</span> <span>389DS</span> <span>for</span> <span>FreeIPA (<span lang="en"><span>primarily by</span> <span>trust</span> <span>with</span> <span>ad)</span></span></span></span><span lang="en"><span></span><span>.</span><br>

<span>This </span><span>is</span> not <span>an appropriate structure for</span> <span>FreeIPA</span>(<span>nor</span> <span>a directory</span> <span>actually</span><span>)</span> <span>but a</span> <span>read-only</span> <span>FreeIPA</span> <span>would be best for</span> <span>us.<br>

<br></span></span><div class="im HOEnZb">--<br>Thanks a lot,<br>-Andre<br></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Nov 14, 2012 at 12:07 PM, Simo Sorce <span dir="ltr"><<a href="mailto:simo@redhat.com" target="_blank">simo@redhat.com</a>></span> wrote:<br>

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>On Wed, 2012-11-14 at 11:54 -0200, Andre Rodrigues wrote:<br>
> Hi,<br>
> I'm trying to setup replicas from my ipa server and<br>
> "ipa-replica-install" is based on multimaster replication.<br>
> Is there a way to set a ipa replica to be a slave/read-only?<br>
><br>
</div>No,at the moment replicas are full masters, we are investigating how to<br>
create read-only replicas in the future, but it will be a while.<br>
<br>
What is the reason you'd like a read-only replica ? Knowing use cases<br>
will help us decide how read-only replicas will need to behave in<br>
general.<br>
<span><font color="#888888"><br>
Simo.<br>
<br>
--<br>
Simo Sorce * Red Hat, Inc * New York<br>
<br>
</font></span></blockquote></div><br></div>
</div></div></div><br>