<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12pt"><div><span>Lukas</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><span>I read the information on those two links, my problem is different. My replica is working fine, the database has all the records. My problem is I am not able to use the replica for ipa-client -install. In one of my replies I sent information that kinit was trying to access my master instead of the replica. Let me know what you think. Thanks</span></div><div></div><div> </div><div>Shreeraj<br>----------------------------------------------------------------------------------------</div><div><br><br></div><div>Change is the only Constant !</div><div
class="yahoo_quoted" style="display: block;"> <br> <br> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 12pt;"> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> On Saturday, February 8, 2014 1:29 AM, Lukas Slebodnik <lslebodn@redhat.com> wrote:<br> </font> </div> <div class="y_msg_container">On (06/02/14 18:33), Shree wrote:<div class="yqt1498322691" id="yqtfd54075"><br clear="none">>First of all, the ipa-replica-install did not allow me to use the --setup-ca<br clear="none">> option complaining that a cert already exists, replicate creation was<br clear="none">> successful after I skipped the option.<br clear="none">>Seems like the replica is one except <br clear="none">>1) There is no CA Service running on the replica (which I
guess is expected)<br clear="none">>and<br clear="none">>2) I am unable to run ipa-client-install successfully on any clients using<br clear="none">> the replica. (I don't have the option of using the primary master as it is<br clear="none">> configured in a segregated environment. Only the master and replica are<br clear="none">> allowed to sync.<br clear="none">>Debug shows it fails at <br clear="none">><br clear="none">>ipa : DEBUG stderr=kinit: Cannot contact any KDC for realm 'mydomainname.com' while getting initial credentials</div><br clear="none">><br clear="none">><br clear="none"><br clear="none">I was not able to install replica witch CA on fedora 20,<br clear="none">Bug is already reported <a shape="rect" href="https://fedorahosted.org/pki/ticket/816" target="_blank">https://fedorahosted.org/pki/ticket/816</a><br clear="none"><br clear="none">Guys from
dogtag found a workaround<br clear="none"><a shape="rect" href="https://fedorahosted.org/pki/ticket/816#comment:12" target="_blank">https://fedorahosted.org/pki/ticket/816#comment:12</a><br clear="none"><br clear="none">Does it work for you?<br clear="none"><br clear="none">LS<div class="yqt1498322691" id="yqtfd00093"><br clear="none"></div><br><br></div> </div> </div> </div> </div></body></html>