I've setup a FreeIPA server and joined it to AD via one-way trust. I'm attempting to add new master nodes to the server for redundancy and it's failing on the setting up initial replication step:
[26/40]: setting up initial replication Starting replication, please wait until this has completed. Update in progress, 15 seconds elapsed [ldap://server:389] reports: Update failed! Status: [Error (-2) - LDAP error: Local error - no response received] [error] RuntimeError: Failed to start replication Your system may be partly configured. Run /usr/sbin/ipa-server-install --uninstall to clean up. Failed to start replication The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information [root@server2 ~]# nc -vz server1 389 Ncat: Version 7.92 ( https://nmap.org/ncat ) Ncat: Connected to ip:389. Ncat: 0 bytes sent, 0 bytes received in 0.02 seconds. [root@server2 ~]# nc -vzu server1 389 Ncat: Version 7.92 ( https://nmap.org/ncat ) Ncat: Connected to ip:389. 0āeā ^C What should I be checking on the one master? Services seem to be up and running, I'm not sure what would be 'blocking' the request. They're on the same network segment so no traffic should be getting intercepted between them. No firewall on either, firewalld is dead and masked. What's even more confusing, attempting the replica install again now tells me that there's a replication agreement between these two boxes. Checking the current master I see no other servers in the topology and attempting to run `ipa server-del server2 --force` succeeds but without --force it tells me that no such server exists. -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
