Thanks Rob & Martin. I will check in Logs. However when I checked last time I noticed that "pki-tomcat" service was not present in ipactl status output on replica server.
Connectivity between master (ipa-inf-prd-ng2-01) and slave (02) is their , able to do telnet/nc on 389 686 from slave to master and vice versa. -Yogesh Sharma (Sent from my HTC) On 30-Oct-2015 7:06 pm, "Rob Crittenden" <rcrit...@redhat.com> wrote: > Martin Basti wrote: > > > > > > On 30.10.2015 11:54, Yogesh Sharma wrote: > >> Additionally, On Replica UI, I am getting below Error Message: > >> > >> > >> IPA Error 4301: CertificateOperationError > >> > >> Certificate operation cannot be completed: Unable to communicate with > >> CMS (Not Found) > >> > > Hello, can you check /var/log/httpd/error_log if there is a detailed > info? > > Apache proxies CA requests. Not Found generally means that the CA is not > running or the CA web app wasn't registered. Check the pki logs in > /var/log/pki. > > rob >
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project