Re: [Freeipa-users] Please help: Re: How to rebuild IPA master?

2012-05-13 Thread Dmitri Pal
On 05/10/2012 05:42 PM, Ade Lee wrote: > David, > > The simplest solution may be as Rob suggests - which is to create a new > CA as a subordinate of the old. > > The other solution would be doable but would require a few more manual > steps. That is, you could: > 1. install a new ca > 2. switch o

Re: [Freeipa-users] Please help: Re: How to rebuild IPA master?

2012-05-10 Thread Ade Lee
David, The simplest solution may be as Rob suggests - which is to create a new CA as a subordinate of the old. The other solution would be doable but would require a few more manual steps. That is, you could: 1. install a new ca 2. switch out the certs in that ca with the ones in your gpg file.

Re: [Freeipa-users] Please help: Re: How to rebuild IPA master?

2012-05-10 Thread Rob Crittenden
David Copperfield wrote: Hi Petr and all, All the chapter your have pointed out is read many times, but that doesn't help at all. My problem is: the Dogtag system ran on the IPA master ONLY before the IPA Master crashes. Now I have to do the following: 1, install and run Dogtag system on IPA r

[Freeipa-users] Please help: Re: How to rebuild IPA master?

2012-05-10 Thread David Copperfield
Hi Petr and all,  All the chapter your have pointed out is read many times, but that doesn't help at all.  My problem is: the Dogtag system ran on the IPA master ONLY before the IPA Master crashes. Now I have to do the following: 1, install and run Dogtag system on IPA replica  -- the document