Re: [Freeipa-users] ipa-replica-prepare error: Profile caIPAserviceCert Not Found

2015-12-22 Thread Karl Forner
Hi Fraser, The ipa-replica-prepare ran in a adelton/freeipa-server:lastest-systemd docker, which I think is based on fedora 23 and contains freeIPA v 4.2.3. I can try to patch it, but I'm really not used to fedora, and moreover there's a debian/docker bug that prevents me from building the docker

Re: [Freeipa-users] ipa-replica-prepare error: Profile caIPAserviceCert Not Found

2015-12-22 Thread Fraser Tweedale
On Tue, Dec 22, 2015 at 10:06:55AM +0100, Karl Forner wrote: > Hi Fraser, > The ipa-replica-prepare ran in a adelton/freeipa-server:lastest-systemd > docker, which I think is based on fedora 23 and contains freeIPA v 4.2.3. > I can try to patch it, but I'm really not used to fedora, and moreover >

Re: [Freeipa-users] ipa-replica-prepare error: Profile caIPAserviceCert Not Found

2015-12-21 Thread Fraser Tweedale
On Mon, Dec 21, 2015 at 01:57:02PM +0100, Karl Forner wrote: > Hello, > > Running: > ipa-replica-prepare ipa-h3s1.example.com --ip-address xx.xx.xx.xx -d -v > fails > with > ipa: DEBUG: Protocol: TLS1.2 > ipa: DEBUG: Cipher: TLS_RSA_WITH_AES_128_CBC_SHA > ipa: DEBUG: request status 200 > ipa:

Re: [Freeipa-users] ipa-replica-prepare error

2015-07-31 Thread Martin Kosek
On 07/30/2015 05:28 PM, Orion Poplawski wrote: On 07/28/2015 11:09 PM, Jan Cholasta wrote: Dne 20.7.2015 v 19:52 Orion Poplawski napsal(a): On 07/20/2015 12:57 AM, Jan Cholasta wrote: Dne 15.7.2015 v 20:57 Orion Poplawski napsal(a): On 07/14/2015 11:53 PM, Jan Cholasta wrote: #

Re: [Freeipa-users] ipa-replica-prepare error

2015-07-30 Thread Orion Poplawski
On 07/28/2015 11:09 PM, Jan Cholasta wrote: Dne 20.7.2015 v 19:52 Orion Poplawski napsal(a): On 07/20/2015 12:57 AM, Jan Cholasta wrote: Dne 15.7.2015 v 20:57 Orion Poplawski napsal(a): On 07/14/2015 11:53 PM, Jan Cholasta wrote: # ipa-replica-prepare -v ipa1.nwra.com

Re: [Freeipa-users] ipa-replica-prepare error

2015-07-30 Thread Jan Cholasta
Dne 30.7.2015 v 17:28 Orion Poplawski napsal(a): On 07/28/2015 11:09 PM, Jan Cholasta wrote: Dne 20.7.2015 v 19:52 Orion Poplawski napsal(a): On 07/20/2015 12:57 AM, Jan Cholasta wrote: Dne 15.7.2015 v 20:57 Orion Poplawski napsal(a): On 07/14/2015 11:53 PM, Jan Cholasta wrote: #

Re: [Freeipa-users] ipa-replica-prepare error

2015-07-28 Thread Jan Cholasta
Dne 20.7.2015 v 19:52 Orion Poplawski napsal(a): On 07/20/2015 12:57 AM, Jan Cholasta wrote: Dne 15.7.2015 v 20:57 Orion Poplawski napsal(a): On 07/14/2015 11:53 PM, Jan Cholasta wrote: # ipa-replica-prepare -v ipa1.nwra.com --dirsrv_pkcs12=nwra.com.p12 --dirsrv_pin=XX

Re: [Freeipa-users] ipa-replica-prepare error

2015-07-20 Thread Jan Cholasta
Dne 15.7.2015 v 20:57 Orion Poplawski napsal(a): On 07/14/2015 11:53 PM, Jan Cholasta wrote: Hi, Dne 10.7.2015 v 22:33 Orion Poplawski napsal(a): On 07/08/2015 11:31 AM, Orion Poplawski wrote: But then when I go to make a replica: # ipa-replica-prepare ipa1.nwra.com

Re: [Freeipa-users] ipa-replica-prepare error

2015-07-20 Thread Orion Poplawski
On 07/20/2015 12:57 AM, Jan Cholasta wrote: Dne 15.7.2015 v 20:57 Orion Poplawski napsal(a): On 07/14/2015 11:53 PM, Jan Cholasta wrote: # ipa-replica-prepare -v ipa1.nwra.com --dirsrv_pkcs12=nwra.com.p12 --dirsrv_pin=XX --http_pkcs12=nwra.com.p12 --http_pin=XX Directory

Re: [Freeipa-users] ipa-replica-prepare error

2015-07-15 Thread Orion Poplawski
On 07/14/2015 11:53 PM, Jan Cholasta wrote: Hi, Dne 10.7.2015 v 22:33 Orion Poplawski napsal(a): On 07/08/2015 11:31 AM, Orion Poplawski wrote: But then when I go to make a replica: # ipa-replica-prepare ipa1.nwra.com --dirsrv_pkcs12=nwra.com.p12 --dirsrv_pin=XX

Re: [Freeipa-users] ipa-replica-prepare error

2015-07-14 Thread Jan Cholasta
Hi, Dne 10.7.2015 v 22:33 Orion Poplawski napsal(a): On 07/08/2015 11:31 AM, Orion Poplawski wrote: But then when I go to make a replica: # ipa-replica-prepare ipa1.nwra.com --dirsrv_pkcs12=nwra.com.p12 --dirsrv_pin=XX --http_pkcs12=nwra.com.p12 --http_pin=XX Directory Manager

Re: [Freeipa-users] ipa-replica-prepare error

2015-07-10 Thread Orion Poplawski
On 07/08/2015 11:31 AM, Orion Poplawski wrote: But then when I go to make a replica: # ipa-replica-prepare ipa1.nwra.com --dirsrv_pkcs12=nwra.com.p12 --dirsrv_pin=XX --http_pkcs12=nwra.com.p12 --http_pin=XX Directory Manager (existing master) password: (SEC_ERROR_LIBRARY_FAILURE)

Re: [Freeipa-users] ipa-replica-prepare error

2015-07-08 Thread Orion Poplawski
On 06/01/2015 08:54 AM, Rob Crittenden wrote: Orion Poplawski wrote: On 05/28/2015 03:09 PM, Rob Crittenden wrote: Orion Poplawski wrote: We did a CAless install: ipa-server-install -r NWRA.COM -n nwra.com -p `cat /etc/ldap.secret` -a `cat /etc/ldap.secret`

Re: [Freeipa-users] ipa-replica-prepare error

2015-06-01 Thread Rob Crittenden
Orion Poplawski wrote: On 05/28/2015 03:09 PM, Rob Crittenden wrote: Orion Poplawski wrote: We did a CAless install: ipa-server-install -r NWRA.COM -n nwra.com -p `cat /etc/ldap.secret` -a `cat /etc/ldap.secret` --root-ca-file=PositiveSSLCA2.crt --dirsrv_pkcs12=nwra.com.p12 --dirsrv_pin=

Re: [Freeipa-users] ipa-replica-prepare error

2015-05-28 Thread Rob Crittenden
Orion Poplawski wrote: We did a CAless install: ipa-server-install -r NWRA.COM -n nwra.com -p `cat /etc/ldap.secret` -a `cat /etc/ldap.secret` --root-ca-file=PositiveSSLCA2.crt --dirsrv_pkcs12=nwra.com.p12 --dirsrv_pin= --http_pkcs12=nwra.com.p12 --http_pin= --idstart=8000 But now when

Re: [Freeipa-users] ipa-replica-prepare error

2015-05-28 Thread Orion Poplawski
On 05/28/2015 03:09 PM, Rob Crittenden wrote: Orion Poplawski wrote: We did a CAless install: ipa-server-install -r NWRA.COM -n nwra.com -p `cat /etc/ldap.secret` -a `cat /etc/ldap.secret` --root-ca-file=PositiveSSLCA2.crt --dirsrv_pkcs12=nwra.com.p12 --dirsrv_pin=