[Freeipa-users] can't install replica

2020-01-24 Thread Charles Hedrick via FreeIPA-users
We are moving from Centos 7 to 8. I did a test on copies and it worked with 8.0. i made the mistake of doing it on the production servers under 8.1. It fails. I removed one server and recreated it as a replica. It worked fine. However the second one failed near the end of the process: Restart

[Freeipa-users] Re: can't install replica

2020-01-24 Thread Charles Hedrick via FreeIPA-users
This is when trying to set up from the centos 7 server. When it tries from the server that is already centos 8, I get [error] DatabaseError: Server is unwilling to perform: Entry is managed by topology plugin. Adding of entry not allow as it’s trying to add the replication agreement. > On

[Freeipa-users] Re: can't install replica

2020-01-24 Thread Charles Hedrick via FreeIPA-users
Here’s my workaround: It appears that this happens only when using commercial certs. It's trying to fetch the Directory Manager password (encrypted) from the primary to put it in the new sysstem. I commented out custodiainstance.py:211, def import_dm_password(self): cli =