I am back from freeIPA replication documentation you can find here https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/identity_management_guide/ipa-replica-manage
I totally understand the directions of replication however in the picture there are two replication agreements specified
- between Directory server
- between Certificate system
It can be also seen in the Topology tab in web GUI where one or another can be defined, in other words, you can replicate only directory server on one node and only certificate system on another node.
After adding third server to my cluster I was unable to add user on it and it turned out, it had replication of DS to server1 and replication of certificate system to server2. When I added missing replication agreements everything started working as a charm.
The documentation site I pasted does not mention anything about these to so my question is, what exactly these replications do and what are consideration and benefits of having just one of them to the node.