[Freeipa-users] Replication status

[Ian Levesque]

On May 2, 2012, at 6:48 PM, Rich Megginson wrote:

>> Is there any way to expose the nsDS5ReplicationAgreement objectClass to a less privileged account; i.e., an account solely designed to check replication status?
> 
> You also need to expose the RUV tombstone entry at the base of each suffix.

Good to know, thanks. I haven't messed with ACIs on 389ds/IPA before; any pointers?

Cheers,
Ian