<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 11/20/2013 01:06 PM, Terry Soucy
wrote:<br>
</div>
<blockquote
cite="mid:CAFjztcEHaqc3DMDDzcQk0GdkjDBXSmNZevUnOO_YfcKgM8dDmw@mail.gmail.com"
type="cite">
<div dir="ltr">I have the keytab with the oldest version number
shown in the kvno command, but when I put that into place, I get
no joy.</div>
</blockquote>
<br>
I don't know. Perhaps someone with ipa kerberos expertise can help.<br>
<br>
<blockquote
cite="mid:CAFjztcEHaqc3DMDDzcQk0GdkjDBXSmNZevUnOO_YfcKgM8dDmw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div>Terry</div>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">
On Wed, Nov 20, 2013 at 4:05 PM, Terry Soucy <span dir="ltr"><<a
moz-do-not-send="true" href="mailto:tsoucy@salesforce.com"
target="_blank">tsoucy@salesforce.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">The service principal ldap/serverB was
exported but not put into place at /etc/dirsrv/ds.keytab.
Replication started failing, dns couldn't connect, the
work generally started coming to an end. I've re-exported
the service principal to a keytab file. If I export from
serverA using the ipa-getkeytab file, I get one version
number. If I export from server B, I get an older version
number. When I use the kvno command, I get an even older
number.<span class="HOEnZb"><font color="#888888">
<div>
<br>
</div>
<div>Terry</div>
</font></span></div>
<div class="HOEnZb">
<div class="h5">
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On Wed, Nov 20, 2013 at 3:56
PM, Rich Megginson <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:rmeggins@redhat.com"
target="_blank">rmeggins@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>
<div>On 11/20/2013 12:37 PM, Terry Soucy
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">I am currently having the
following issue.
<div><br>
</div>
<div>Running Redhat IPA on RHEL6.3
(ipa-server-3.0.0.25) in a basic two
server multimaster setup.</div>
<div><br>
</div>
<div>Servers A is running fine, but Server
B is out of sync. More specifically, the
ldap service principal is out of sync
between the two servers, which is
leading to no replication, etc, etc. I
need to sync the ldap/serverB service
principal on Server A with the
ldap/serverB service principal on Server
B. Is there a way to do that, or am I
looking at a re-init of server B?</div>
</div>
</blockquote>
<br>
</div>
I'm not sure what you mean by "the ldap service
principal is out of sync between the two
servers"?<br>
<br>
<blockquote type="cite">
<div>
<div dir="ltr">
<div><br>
</div>
<div>Terry<br clear="all">
<div><br>
</div>
-- <br>
<div dir="ltr">Terry Soucy - Systems
Engineer<br>
Salesforce MarketingCloud - <a
moz-do-not-send="true"
href="http://www.salesforce.com"
target="_blank">http://www.salesforce.com</a><br>
(o) <a moz-do-not-send="true"
href="tel:506.631.7445"
value="+15066317445" target="_blank">506.631.7445</a>
(c) <a moz-do-not-send="true"
href="tel:506.609.3247"
value="+15066093247" target="_blank">506.609.3247</a>
| (e) <a moz-do-not-send="true"
href="mailto:tsoucy@salesforce.com"
target="_blank">tsoucy@salesforce.com</a></div>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</div>
<pre>_______________________________________________
Freeipa-users mailing list
<a moz-do-not-send="true" href="mailto:Freeipa-users@redhat.com" target="_blank">Freeipa-users@redhat.com</a>
<a moz-do-not-send="true" href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
</div>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div dir="ltr">Terry Soucy - Systems Engineer<br>
Salesforce MarketingCloud - <a
moz-do-not-send="true"
href="http://www.salesforce.com" target="_blank">http://www.salesforce.com</a><br>
(o) <a moz-do-not-send="true"
href="tel:506.631.7445" value="+15066317445"
target="_blank">506.631.7445</a> (c) <a
moz-do-not-send="true" href="tel:506.609.3247"
value="+15066093247" target="_blank">506.609.3247</a>
| (e) <a moz-do-not-send="true"
href="mailto:tsoucy@salesforce.com"
target="_blank">tsoucy@salesforce.com</a></div>
</div>
</div>
</div>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div dir="ltr">Terry Soucy - Systems Engineer<br>
Salesforce MarketingCloud - <a moz-do-not-send="true"
href="http://www.salesforce.com" target="_blank">http://www.salesforce.com</a><br>
(o) 506.631.7445 (c) 506.609.3247 | (e) <a
moz-do-not-send="true" href="mailto:tsoucy@salesforce.com"
target="_blank">tsoucy@salesforce.com</a></div>
</div>
</blockquote>
<br>
</body>
</html>