<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On May 11, 2016, at 9:14 AM, Zak Wolfinger <<a href="mailto:zwolfinger@myemma.com" class="">zwolfinger@myemma.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">I’m trying to set up FreeIPA as a replica. I’ve followed the instructions in section 4 here: <div class=""><br class=""></div><div class=""><a href="https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html#prepping-replica" class="">https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html#prepping-replica</a></div><div class=""> </div><div class="">The replica install appears to be successful, but when I try to do ‘ipactl start’ I get this:</div><div class=""><br class=""></div><div class="">IPA is not configured (see man pages of ipa-server-install for help)</div><div class=""><br class=""></div><div class="">I’ve looked through the man pages but I’m not seeing what needs to be done. </div><div class=""><br class=""></div><div class="">Can anyone offer suggestions?</div><div class=""><br class=""></div><div class=""><div class="">
<div style="letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-ligatures: normal; font-variant-position: normal; font-variant-caps: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; line-height: normal; orphans: 2; widows: 2;"><font class="Apple-style-span" color="#080F8E"><font class="Apple-style-span"><font class="Apple-style-span" face="Arial"><br class="Apple-interchange-newline"></font></font></font></div></div></div></div></div></div></blockquote></div><br class=""><div class="">I tried doing an isa-server-install —uninstall and doing my isa-replica-install again. Now I’m seeing this:</div><div class=""><br class=""></div><div class=""><div class="">[error] UNWILLING_TO_PERFORM: {'info': 'modification of attribute nsds5replicabinddngroup is not allowed in replica entry', 'desc': 'Server is unwilling to perform'}</div></div><div class=""><br class=""></div><div class="">The old server is FreeIPA 3.0 and the new replica is obviously 4.3. Am I missing something?</div></body></html>