Tomas Dusek via FreeIPA-users wrote: > Hello, > > where to find additional information to "ipa-replica-manage re-initialize > --from master.example.com fails with [Error (49) - LDAP error: Invalid > credentials - no response received]"? > > root@serverB: ipa-replica-manage re-initialize --from master.example.com -d > ... > ipa: DEBUG: retrieving schema for SchemaCache > url=ldaps://master.example.com:636 conn=<ldap.ldapobject.SimpleLDAPObject > object at 0x7fbafdaaa748> > ipa: DEBUG: retrieving schema for SchemaCache > url=ldaps://master.example.com:636 conn=<ldap.ldapobject.SimpleLDAPObject > object at 0x7fbafd451828> > ipa: INFO: Setting agreement > cn=serverB.example.com-to-master.example.com,cn=replica,cn=dc\=ipa\,dc\=example\,dc\=com,cn=mapping > tree,cn=config schedule to 2358-2359 0 to force synch > ipa: INFO: Deleting schedule 2358-2359 0 from agreement > cn=serverB.example.com-to-master.example.com,cn=replica,cn=dc\=ipa\,dc\=example\,dc\=com,cn=mapping > tree,cn=config > Update in progress, 15 seconds elapsed > [ldaps://serverB.example.com:636] reports: Update failed! Status: [Error (49) > - LDAP error: Invalid credentials - no response received] > ipa: DEBUG: Destroyed connection context.ldap2_140441096464368 > ... > > On serverB in /var/log/slapd-serverB/errors: > [29/Aug/2024:12:20:11.311481133 +0200] - ERR - set_krb5_creds - Could not get > initial credentials for principal [ldap/[email protected]] in > keytab [FILE:/etc/dirsrv/ds.keytab]: -1765328360 (Preauthentication failed) > > The admin PWD has been recently changed, but the change has not been > replicated to serverB. > Which credentials are invalid? > > serverB: > RHEL 8.10 & IPA 4.9.13 > master: > RHEL 9.4 & IPA 4.11
I'd compare the KVNO of ldap/[email protected] between the two servers. I suspect they will be different. What is the reason to do the re-init? rob -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
