[tyski]

I read somewhere that LDAP replications can be initiated in any direction, so this push-only scenario should work. I don’t know about the kerberos replication stuff though. Either way, I’m guessing that Apple’s implementation will either not allow this or be ridiculously hard to configure. In the end, its easy to test and if it doesn’t work, I will just keep the necessary holes in the firewall open to allow bidirectional replication initiation.

[Author]

Posts