On Mon, 2012-02-13 at 20:43 +0100, Sigbjorn Lie wrote:
> On 02/13/2012 08:16 PM, Rob Crittenden wrote:
> > Sigbjorn Lie wrote:
> >> Hi,
> >> What precautions need to be taken when replacing the primary/first IPA
> >> server?
> >> Is it enough to reinstall the server and run a ipa-replica-install from
> >> one of the other replicas?
> > It depends on what type of CA installation you have. Did you install
> > with dogtag or with a selfsign CA?
> > rob
If you installed the CA on more than one replica, then you can remove
the first master, all the info is replicated on the other replicas that
have a clone of the CA. Note that the CA is not replicated by default
see the --setup-ca option or ipa-ca-install
Simo Sorce * Red Hat, Inc * New York
Freeipa-users mailing list