Re: [Freeipa-users] CA Fails to build Replica (w/External CA)

2016-09-22 Thread Korey Chapman
kcs12-cert-find --pkcs12-file /tmp/ca.p12 --pkcs12-password password > and see if the output displays "Trust Flags: xxx" for all the certs. > > Flo. > > [1] https://fedorahosted.org/pki/ticket/2255 > > > On 09/21/2016 05:38 PM, Korey Chapman wrote: >> >

Re: [Freeipa-users] CA Fails to build Replica (w/External CA)

2016-09-21 Thread Korey Chapman
On Wed, Sep 21, 2016 at 6:47 AM, Tomas Krizek <tkri...@redhat.com> wrote: > On 09/21/2016 02:13 AM, Korey Chapman wrote: > > Hello list, > > I'm currently attempting to add a second CA server to our IPA cluster (all > servers Centos 7.2 with IPA 4.2.0). However, it is faili

[Freeipa-users] CA Fails to build Replica (w/External CA)

2016-09-21 Thread Korey Chapman
Hello list, I'm currently attempting to add a second CA server to our IPA cluster (all servers Centos 7.2 with IPA 4.2.0). However, it is failing no matter how I try to setup the CA (ipa-replica-install with --setup-ca or ipa-replica-install followed by ipa-ca-install). The only useful thing in