[Samba] Replicating AD through Firewall?

[Oliver Rath]

Hi list,

is it possible, to replicate a (readonly-) AD/AC to another location
(for authentication there locally) in a kind of "push only"?

The problem is a firewall, which only allows to initiate connection into
the mirror, but not to pull from the mirror.

I think something like this:

AD/DC (Win2008 Server) --(Firewall)--> AD/DC Mirror (Samba 4.x)

Any hints?

TfH!

Regards,
Oliver