<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
We are planning to reconfigure our core Freeipa servers, basically
building a replacement infrastructure and migrating to it. What
we're planning right now is a core of three Freeipa servers each of
which has a CA, with as much distribution of replication as we can
manage. I imagine that means one of them replicates to the other two
but am open to other ideas.<br>
<br>
For remote locations, we're planning to stand up caching-only DNS
servers, as authenticating back to the main IPA servers works
extremely well; it's just DNS that needs a little help.<br>
<br>
Any thoughts before I start setting these servers (VMs, most likely)
up?<br>
<br>
<br>
<div class="moz-signature">-- <br>
<div><b>Bret Wortman</b></div>
<div><img src="cid:part1.07070603.08030208@damascusgrp.com"
height="53/" width="200"><br>
</div>
<div><a href="http://damascusgrp.com/">http://damascusgrp.com/</a><br>
</div>
<div><a href="http://about.me/wortmanbret">http://about.me/wortmanbret</a><br>
<br>
</div>
</div>
</body>
</html>