Re: [Freeipa-users] How to tell if a replica server is also a CA?

2017-03-07 Thread Rob Crittenden 
Zak Wolfinger wrote:
> How can I tell if my FreeIPA 4.2.0 replica servers are also configured to be 
> CAs?
> 
> 

Brute force way is to look in LDAP under
cn=masters,cn=ipa,cn=etc,dc=example,dc=com

$ ldapsearch -LLL -Y GSSAPI -b cn=masters,cn=ipa,cn=etc,dc=example,dc=com dn

The configured services for every master is listed there.

rob

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

[Freeipa-users] How to tell if a replica server is also a CA?

2017-03-07 Thread Zak Wolfinger 
How can I tell if my FreeIPA 4.2.0 replica servers are also configured to be 
CAs?


-- 
 


-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project