Hello,<div><br></div><div>I am new to FreeIPA so far I have setup the Server and few test clients, all went really smooth. However, I am having hard time in setting up the replication and any help will great!.</div><div><br>
</div><div>I am using CentOS 6.4. Package Info</div><div><br></div><div><div>ipa-server-3.0.0-26.el6_4.2.x86_64</div></div><div>389-ds-base-1.2.11.15-12.el6_4.x86_64 </div><div><br></div><div>I followed the steps mentioned in </div>
<div><br></div><div><a href="http://freeipa.org/docs/1.2/Installation_Deployment_Guide/en-US/html/chap-Installation_and_Deployment_Guide-Setting_up_Multi_Master_Replication.html">http://freeipa.org/docs/1.2/Installation_Deployment_Guide/en-US/html/chap-Installation_and_Deployment_Guide-Setting_up_Multi_Master_Replication.html</a></div>
<div><br></div><div>When I try to setup the replica with the replica prepare file from the master with --skip-conneccheck (because krb is not running on UDP ports)</div><div><br></div><div><div>ipa-replica-install /var/lib/ipa/replica-info-ipa02.ma.net.gpg --skip-conncheck.</div>
</div><div><br></div><div>At the end I get below error</div><div><br></div><div>-----------------------------------------</div><div> [22/31]: setting up initial replication</div><div><div>Starting replication, please wait until this has completed.</div>
<div>[<a href="http://ipa01.ma.net">ipa01.ma.net</a>] reports: Update failed! Status: [-1 - LDAP error: Can't contact LDAP server]</div><div><br></div><div>Your system may be partly configured.</div><div>Run /usr/sbin/ipa-server-install --uninstall to clean up.</div>
<div><br></div><div>Failed to start replication</div></div><div>-------------------------------------------</div><div>On the log file </div><div>-------------------------------------------</div><div><br></div><div><div>2013-04-01T16:25:53Z DEBUG retrieving schema for SchemaCache url=ldaps://<a href="http://ipa01.ma.net:636">ipa01.ma.net:636</a> conn</div>
<div>=<ldap.ldapobject.SimpleLDAPObject instance at 0x392c830></div><div>2013-04-01T16:25:54Z INFO File "/usr/lib/python2.6/site-packages/ipaserver/install/installut</div><div>ils.py", line 614, in run_script</div>
<div> return_value = main_function()</div><div><br></div><div> File "/usr/sbin/ipa-replica-install", line 473, in main</div><div> ds = install_replica_ds(config)</div><div><br></div><div> File "/usr/sbin/ipa-replica-install", line 150, in install_replica_ds</div>
<div> pkcs12_info)</div><div><br></div><div> File "/usr/lib/python2.6/site-packages/ipaserver/install/dsinstance.py", line 300, in create_replica</div><div> self.start_creation(runtime=60)</div><div><br></div>
<div> File "/usr/lib/python2.6/site-packages/ipaserver/install/service.py", line 358, in start_creation</div><div> method()</div><div>:</div></div><div><div> File "/usr/lib/python2.6/site-packages/ipaserver/install/dsinstance.py", line 313, in __setup_replica</div>
<div> r_bindpw=self.dm_password)</div><div><br></div><div> File "/usr/lib/python2.6/site-packages/ipaserver/install/replication.py", line 865, in setup_replication</div><div> raise RuntimeError("Failed to start replication")</div>
<div><br></div><div>2013-04-01T16:25:54Z INFO The ipa-replica-install command failed, exception: RuntimeError: Failed to start replication</div></div><div><br></div><div>------------------------------------------------</div>
<div><br></div><div>I also find similar error reported while setting up ipa on Fedora 18 at <a href="https://www.redhat.com/archives/freeipa-users/2013-February/msg00440.html">https://www.redhat.com/archives/freeipa-users/2013-February/msg00440.html</a></div>
<div><br></div><div>But could not find its resolution.</div><div><br></div><div>I am able to connect to the 389/636 port from the slave. Firewall is off on both ends and hostnames resolves properly.</div><div><br></div><div>
<br></div><div><div><br></div></div><div>Thanks</div><div><br></div><div><br></div><div><br></div><br><br>-- <br><br><div>--</div><div><a href="http://about.me/chandank" target="_blank">http://about.me/chandank</a><br></div>
<br>