[Freeipa-users] Re: Issues installing replica

2018-11-06 Thread Alex Corcoles via FreeIPA-users
OK, will to that this afternoon. Is creating a new replica reusing an old replica's name a supported thing? My replica is automatically provisioned, so it's appealing to me to rebuild it if there's any problem with it, but having to change its name is a chore (replica names should not be important

[Freeipa-users] Re: Issues installing replica

2018-11-06 Thread Fraser Tweedale via FreeIPA-users
On Tue, Nov 06, 2018 at 10:29:00AM +0100, Alex Corcoles via FreeIPA-users wrote: > OK, will to that this afternoon. > > Is creating a new replica reusing an old replica's name a supported thing? > My replica is automatically provisioned, so it's appealing to me to rebuild > it if there's any probl

[Freeipa-users] How to wreck your IPA environment

2018-11-06 Thread Chris Evich via FreeIPA-users
Hey all, About a year ago I did a really, really stupid thing. I updated IPA on one CentOS 7 host, then before being really sure things were working, I did the replica. Turned out the first upgrade only 'mostly' worked[*], meaning both hosts are now partially wrecked :S The good news is, DNS

[Freeipa-users] Re: Issues installing replica

2018-11-06 Thread Rob Crittenden via FreeIPA-users
Alex Corcoles via FreeIPA-users wrote: > So I solved my LXC problems (thanks Rob, again), but now: > > ipa-replica-install -U --setup-ca -N > > fails when rebuilding my replica from scratch, see: > > https://gist.github.com/alexpdp7/4431da5e11afe6029e2baa01bc1f2251 > > , where I think I've copi

[Freeipa-users] Re: How to wreck your IPA environment

2018-11-06 Thread Rob Crittenden via FreeIPA-users
Chris Evich via FreeIPA-users wrote: > Hey all, > > About a year ago I did a really, really stupid thing. I updated IPA on one > CentOS 7 host, then before being really sure things were working, I did the > replica. Turned out the first upgrade only 'mostly' worked[*], meaning both > hosts ar

[Freeipa-users] Vault: Cannot authenticate agent with certificate

2018-11-06 Thread Peter Oliver via FreeIPA-users
I have a CentOS 7 server running ipa-server-4.5.4, recently installed. I find that operations related to the vault feature fail. For example: > ipa -v vault-add test --type=standard ipa: INFO: trying https://ipa-01.example.com/ipa/session/json ipa: INFO: [try 1]: Forwarding 'vault_add_internal/

[Freeipa-users] Re: How to wreck your IPA environment

2018-11-06 Thread Chris Evich via FreeIPA-users
...uggg, crap, tried replying twice and hyperkitty seems to just eat all my text... ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct

[Freeipa-users] Re: How to wreck your IPA environment

2018-11-06 Thread Chris Evich via FreeIPA-users
...oh, it says "Your reply has been sent, and is being processed'...maybe that means it will eventually show up. I guess I'll wait :S ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le

[Freeipa-users] Getting access denied when using kerberos when mounting nfs share

2018-11-06 Thread Kevin Vasko via FreeIPA-users
I followed these instructions to enable kerberos within my realm/domain. My FreeIPA, NFS server and my NFS client is CentOS 7.4 https://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/kerb-nfs.html I’m completely stuck in that when I mount the NFS share I get Sudo mount -o sec=krb5p

[Freeipa-users] Re: How to wreck your IPA environment

2018-11-06 Thread Chris Evich via FreeIPA-users
DNS and kerberos seem to be working fine (and have been for a long while). All `ipa` commands fail: ``` # kinit admin Password for admin@$REALM: # ipactl status Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: RUNNING named Service: RUNNING httpd Service: RUNNING ipa-custodi