as below, regards
Steven 8><---- But overall, there is a decent HOWTO on the migration on these pages: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/migrating-ipa-proc.html 8><---- fraid not, tried it. ============== [root@vuwunicoipam004 thing]# ipa-replica-install --setup-ca --ip-address=10.100.32.53 --setup-dns --forwarder=10.100.32.31 -U replica-info-vuwunicoipam004.xxxxxxxxx.gpg Checking forwarders, please wait ... WARNING: DNS forwarder 10.100.32.31 does not return DNSSEC signatures in answers Please fix forwarder configuration to enable DNSSEC support. (For BIND 9 add directive "dnssec-enable yes;" to "options {}") WARNING: DNSSEC validation will be disabled Directory Manager (existing master) password: CA cannot be installed in CA-less setup. [root@vuwunicoipam004 thing]# ====== -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
