<html><head></head><body><div style="color:#000; background-color:#fff; font-family:verdana, helvetica, sans-serif;font-size:16px">Hi,<div id="yui_3_16_0_ym19_1_1476869019198_3177" dir="ltr">Were using FreeIPA on Ubuntu Xenial. We lost the Master server. <br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1476869019198_4791"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1476869019198_4792">I have some questions:</div><div dir="ltr" id="yui_3_16_0_ym19_1_1476869019198_4505">1. Do DNS replicate among other replicas is we change/add DNS records? If not can this behaviour be changed? <br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1476869019198_4506">2. How do we promote a replica to become a master? We have not configured our servers to become a CA. Our CA is Comodo and we have configured FreeIPA to use a certificate, key and interim certificates from Comodo. using the options:</div><div dir="ltr" id="yui_3_16_0_ym19_1_1476869019198_4748"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1476869019198_4565">--http_pkcs12=....</div><div dir="ltr" id="yui_3_16_0_ym19_1_1476869019198_4768">--http_pin=....<br id="yui_3_16_0_ym19_1_1476869019198_4758">--dirsrv_pkcs12=...<br id="yui_3_16_0_ym19_1_1476869019198_4759">--dirsrv_pin=....<br id="yui_3_16_0_ym19_1_1476869019198_4760"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1476869019198_4564">Hope someone can help. Quite urgent.</div><div dir="ltr"><br></div><div dir="ltr">Regards,<br></div><div dir="ltr">James Harrison<br></div></div></body></html>