[Freeipa-users] Replica Setup Issue

2014-12-12 Thread Matt Chesler
1. Create replica ipa-1 from old-ipa-1 2. Followed procedure documented at http://www.freeipa.org/page/Howto/Promote_CA_to_Renewal_and_CRL_Master to make ipa-1 the node responsible for CRL generation and CA renewal 3. Prepare ipa-2 to be a replica by running 'ipa-replica-prepare ipa-2.example.com'

[Freeipa-users] Replica re-initialization

2014-12-11 Thread Matt Chesler
I have a cluster of four IPA masters that should be performing fully meshed replication. I discovered yesterday that a recently created user only existed on a single master. After looking through all four masters, it appears that several recent updates only exist on one of the masters. I do not

[Freeipa-users] Certificate Woes

2014-03-28 Thread Matt Chesler
Hi all, Our IPA instance started acting strangely earlier today. I restarted the IPA service on the primary node and things seemed to return to normal. Over the course of the day, we decided to add a third IPA server to our environment. When I attempted to perform the ipa-replica-prepare, I