Hello,

where to find additional information to "ipa-replica-manage re-initialize 
--from master.example.com fails with [Error (49) - LDAP error: Invalid 
credentials - no response received]"?

root@serverB: ipa-replica-manage re-initialize --from master.example.com -d
...
ipa: DEBUG: retrieving schema for SchemaCache 
url=ldaps://master.example.com:636 conn=<ldap.ldapobject.SimpleLDAPObject 
object at 0x7fbafdaaa748>
ipa: DEBUG: retrieving schema for SchemaCache 
url=ldaps://master.example.com:636 conn=<ldap.ldapobject.SimpleLDAPObject 
object at 0x7fbafd451828>
ipa: INFO: Setting agreement 
cn=serverB.example.com-to-master.example.com,cn=replica,cn=dc\=ipa\,dc\=example\,dc\=com,cn=mapping
 tree,cn=config schedule to 2358-2359 0 to force synch
ipa: INFO: Deleting schedule 2358-2359 0 from agreement 
cn=serverB.example.com-to-master.example.com,cn=replica,cn=dc\=ipa\,dc\=example\,dc\=com,cn=mapping
 tree,cn=config
Update in progress, 15 seconds elapsed
[ldaps://serverB.example.com:636] reports: Update failed! Status: [Error (49) - 
LDAP error: Invalid credentials - no response received]
ipa: DEBUG: Destroyed connection context.ldap2_140441096464368
...

On serverB in /var/log/slapd-serverB/errors:
[29/Aug/2024:12:20:11.311481133 +0200] - ERR - set_krb5_creds - Could not get 
initial credentials for principal [ldap/[email protected]] in 
keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328360 (Preauthentication failed)

The admin PWD has been recently changed, but the change has not been replicated 
to serverB.
Which credentials are invalid? 

serverB:
RHEL 8.10 & IPA 4.9.13
master:
RHEL 9.4 & IPA 4.11

Thanks Tomas
-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to