Re: [Freeipa-users] Are replica gpg files reusable?

2014-04-25 Thread Rob Crittenden
Justin Brown wrote: This type of behavior is generally beyond what Puppet should do because it involves two systems retrieving information directly from one another and the puppet master can't reasonably serve as the repository of that information. Using a separate tool will likely work better. T

Re: [Freeipa-users] Are replica gpg files reusable?

2014-04-25 Thread Dmitri Pal
On 04/25/2014 12:48 PM, Justin Brown wrote: This type of behavior is generally beyond what Puppet should do because it involves two systems retrieving information directly from one another and the puppet master can't reasonably serve as the repository of that information. Using a separate tool wi

Re: [Freeipa-users] Are replica gpg files reusable?

2014-04-25 Thread Justin Brown
This type of behavior is generally beyond what Puppet should do because it involves two systems retrieving information directly from one another and the puppet master can't reasonably serve as the repository of that information. Using a separate tool will likely work better. There's at least two wa

Re: [Freeipa-users] Are replica gpg files reusable?

2014-04-25 Thread Rob Crittenden
Dmitri Pal wrote: On 04/25/2014 05:06 AM, Petr Spacek wrote: On 25.4.2014 00:15, Dave Jones wrote: Hi Rob, I was considering installing replicas using puppet. Having pre-prepared replica files available would be easier than having to run an ipa-replica-prepare and scp copy. I had guessed the

Re: [Freeipa-users] Are replica gpg files reusable?

2014-04-25 Thread Dmitri Pal
On 04/25/2014 05:06 AM, Petr Spacek wrote: On 25.4.2014 00:15, Dave Jones wrote: Hi Rob, I was considering installing replicas using puppet. Having pre-prepared replica files available would be easier than having to run an ipa-replica-prepare and scp copy. I had guessed the ldap/kerberos r

Re: [Freeipa-users] Are replica gpg files reusable?

2014-04-25 Thread Petr Spacek
On 25.4.2014 00:15, Dave Jones wrote: Hi Rob, I was considering installing replicas using puppet. Having pre-prepared replica files available would be easier than having to run an ipa-replica-prepare and scp copy. I had guessed the ldap/kerberos replication would handle the user/password/DNS

Re: [Freeipa-users] Are replica gpg files reusable?

2014-04-24 Thread Dave Jones
Hi Rob, I was considering installing replicas using puppet. Having pre-prepared replica files available would be easier than having to run an ipa-replica-prepare and scp copy. I had guessed the ldap/kerberos replication would handle the user/password/DNS updates, and that changing CA certific

Re: [Freeipa-users] Are replica gpg files reusable?

2014-04-24 Thread Rob Crittenden
Dave Jones wrote: Hi, Should the replica gpg created by ipa-replica-prepare be re-created when there have been trivial changes such as adding/modifying a user/group/password on the IPA server? What change of condition(s) in the ‘master’ IPA host would prevent reuse of a previously prepared r

[Freeipa-users] Are replica gpg files reusable?

2014-04-24 Thread Dave Jones
Hi, Should the replica gpg created by ipa-replica-prepare be re-created when there have been trivial changes such as adding/modifying a user/group/password on the IPA server? What change of condition(s) in the ‘master’ IPA host would prevent reuse of a previously prepared replica gpg file, or