On 01/17/2013 09:49 AM, Orion Poplawski wrote:

Anyway, tried again and now:

Configuring Kerberos KDC: Estimated time 30 seconds
   [1/9]: adding sasl mappings to the directory
   [2/9]: writing stash file from DS
   [3/9]: configuring KDC
   [4/9]: creating a keytab for the directory
   [5/9]: creating a keytab for the machine
   [6/9]: adding the password extension to the directory
   [7/9]: enable GSSAPI for replication
creation of replica failed: list index out of range

Okay, this is more cert stuff, on the replica:

[17/Jan/2013:09:41:55 -0700] slapi_ldap_bind - Error: could not send startTLS request: error -11 (Connect error) errno 0 (Success)

Because the ds instance there doesn't recognize the cert on the master.

Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA, Boulder Office                  FAX: 303-415-9702
3380 Mitchell Lane                       or...@nwra.com
Boulder, CO 80301                   http://www.nwra.com

Freeipa-users mailing list

Reply via email to