[Freeipa-users] Re: best practice for a freeipa cluster with replication
Omar Pagan via FreeIPA-users wrote:
Hello guys,
I'm starting fresh with a 3 node cluster for freeipa. I just want to ask for best
practices here.
Should I build 3 nodes, each with the ipa-server, http, etc, etc... and then try to
replicate? or
should I build 1 node with everything and then build the other two nodes as replicas?
What's the best way to deploy the cluster?
You cannot link independent IPA server installations. Your only choice
is do an initial server install and then create replica installations
from that.
IPA is like Animal Farm in that all servers are equal, some are just
more equal than others. The distinguishing features are the optional
services: DNS, CA, KRA and AD trust.
We recommend at least two servers with a CA.
rob