<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix"><br>
<a
href="http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/promoting-replica.html">http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/promoting-replica.html</a><br>
<a class="moz-txt-link-freetext" href="http://www.freeipa.org/page/Howto/Promoting_a_self-signed_FreeIPA_CA">http://www.freeipa.org/page/Howto/Promoting_a_self-signed_FreeIPA_CA</a><br>
<br>
<br>
On 7/23/14, 11:21 AM, Rob Crittenden wrote:<br>
</div>
<blockquote cite="mid:53CFD2DD.4090007@redhat.com" type="cite">
<pre wrap="">John Moyer wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hello All,
I was going to promote one of my newer replica IPA servers to be the
master of our IPA environment and noticed when following the procedures
to do this that I'm apparently missing this file from my master IPA server:
/var/lib/ipa/ca_serialno
Is there a way to regenerate this file?
I just made a replica like 3 weeks ago, so it definitely is the
master, I'm just not sure why this file doesn't exist. Looked at my
backups from the last 3 months and it hasn't existed in that time period.
</pre>
</blockquote>
<pre wrap="">
That file was the source of serial numbers for what was called selfsign
mode (now deprecated in 3.3+). It installed a file-based CA on the
initial IPA master. You needed to pass --selfsign to the installer
What docs are you working from that say you need to worry about this
file? They are likely ancient.
rob
</pre>
</blockquote>
<br>
<br>
<div class="moz-signature"><br>
<br>
Thanks,<br>
<hr>
John Moyer<br>
Director, IT Operations<br>
901 N. Stuart St. STE 904A<br>
Arlington,VA 22203<br>
703.678.2311 Office<br>
240.460.0023 Cell<br>
703.678.2312 Fax<br>
</div>
</body>
</html>