I followed the thread, and I’m not sure you ever got an answer. Generally ipa replica
install seems to create one replication agreement. The exact relationships for 3 servers
depends upon which master the replica was created from. It could be 2 replicas talking to
the original, or 3 in a line. But either way there’s two replication agreements. The
obvious thing for 3 servers is a complete triangle. Without that, failure of the wrong
node could cause the other two to become disconnected from each other, which is probably
not desirable. So you’d want to add the third node. Whichever one is missing.
I assume the reason they don’t add more replicas by default is that in larger
configurations you probably don’t want a fully-connected mesh. ipa-replica-install has no
way of knowing what your final topology is going to be, and no way to guess what
replication agreements you really need. So it does the minimal necessary to maintain
connectivity.
On Oct 29, 2019, at 4:44 AM, lejeczek via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
hi everyone,
I wanted to ask about number of segments after a clean IPA setup with 3
servers.
I see for both 'domain' & 'ca' two segments created by
master/replica
installations, which makes me wonder - should there not be three? no/yes
& why?
many thanks, L.
<pEpkey.asc>_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...