<html><head></head><body><div style="color:#000; background-color:#fff; font-family:verdana, helvetica, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1478774641638_31880"><span></span></div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1478774641638_31881"><div id="yui_3_16_0_ym19_1_1478774641638_31882">We get the below message for replica machines and Ive seen it for client machines too:</div><div id="yui_3_16_0_ym19_1_1478774641638_32076"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1478774641638_31976">[root@pul-lv-ipa-02 bin]# /root/bin/freeipa-replica-install.sh /var/lib/ipa/replica-info-$(hostname -f).gpg<br id="yui_3_16_0_ym19_1_1478774641638_31945">Using reverse zone(s) 23.10.in-addr.arpa.<br id="yui_3_16_0_ym19_1_1478774641638_31946">Run connection check to master<br id="yui_3_16_0_ym19_1_1478774641638_31947">Check connection from replica to remote master 'aaaaaa.aaaa.com ':<br id="yui_3_16_0_ym19_1_1478774641638_31948"> Directory Service: Unsecure port (389): OK<br id="yui_3_16_0_ym19_1_1478774641638_31949"> Directory Service: Secure port (636): OK<br id="yui_3_16_0_ym19_1_1478774641638_31950"> Kerberos KDC: TCP (88): OK<br id="yui_3_16_0_ym19_1_1478774641638_31951"> Kerberos Kpasswd: TCP (464): OK<br id="yui_3_16_0_ym19_1_1478774641638_31952"> HTTP Server: Unsecure port (80): OK<br id="yui_3_16_0_ym19_1_1478774641638_31953"> HTTP Server: Secure port (443): OK<br id="yui_3_16_0_ym19_1_1478774641638_31954"><br id="yui_3_16_0_ym19_1_1478774641638_31955">The following list of ports use UDP protocol and would need to be<br id="yui_3_16_0_ym19_1_1478774641638_31956">checked manually:<br id="yui_3_16_0_ym19_1_1478774641638_31957"> Kerberos KDC: UDP (88): SKIPPED<br id="yui_3_16_0_ym19_1_1478774641638_31958"> Kerberos Kpasswd: UDP (464): SKIPPED<br id="yui_3_16_0_ym19_1_1478774641638_31959"><br id="yui_3_16_0_ym19_1_1478774641638_31960">Connection from replica to master is OK.<br id="yui_3_16_0_ym19_1_1478774641638_31961">Start listening on required ports for remote master check<br id="yui_3_16_0_ym19_1_1478774641638_31962">Get credentials to log in to remote master<br id="yui_3_16_0_ym19_1_1478774641638_31963">Check SSH connection to remote master<br id="yui_3_16_0_ym19_1_1478774641638_31964">Could not SSH into remote host. Error output:<br id="yui_3_16_0_ym19_1_1478774641638_31965"> OpenSSH_6.6.1, OpenSSL 1.0.1e-fips 11 Feb 2013<br id="yui_3_16_0_ym19_1_1478774641638_31966"> debug1: Reading configuration data /etc/ssh/ssh_config<br id="yui_3_16_0_ym19_1_1478774641638_31967"> debug1: /etc/ssh/ssh_config line 56: Applying options for *<br id="yui_3_16_0_ym19_1_1478774641638_31968"> debug1: Connecting to aaaaaa.aaaa.com [10.23.45.88] port 22.<br id="yui_3_16_0_ym19_1_1478774641638_31969"> debug1: connect to address 10.23.45.88 port 22: Connection refused<br id="yui_3_16_0_ym19_1_1478774641638_31970"> ssh: connect to host pul-lv-ipa-01.int.worldfirst.com port 22: Connection refused<br id="yui_3_16_0_ym19_1_1478774641638_31971">Could not SSH to remote host.<br id="yui_3_16_0_ym19_1_1478774641638_31972">ipa.ipapython.install.cli.install_tool(Replica): ERROR Connection check failed!<br id="yui_3_16_0_ym19_1_1478774641638_31973">Please fix your network settings according to error messages above.<br id="yui_3_16_0_ym19_1_1478774641638_31974">If the check results are not valid it can be skipped with --skip-conncheck parameter.<br id="yui_3_16_0_ym19_1_1478774641638_31975"><br></div><br></div><div class="yahoo_quoted" id="yui_3_16_0_ym19_1_1478774641638_32068" style="display: block;"> <div style="font-family: verdana, helvetica, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1478774641638_32067"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1478774641638_32066"> <div dir="ltr" id="yui_3_16_0_ym19_1_1478774641638_32065"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> James Harrison <jamesaharrisonuk@yahoo.co.uk><br> <b><span style="font-weight: bold;">To:</span></b> "freeipa-users@redhat.com" <freeipa-users@redhat.com> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, 10 November 2016, 12:00<br> <b><span style="font-weight: bold;">Subject:</span></b> Specify different ssh port for ipa-conncheck<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_ym19_1_1478774641638_32070"><br><div id="yiv9410635192"><div id="yui_3_16_0_ym19_1_1478774641638_32073"><div style="color:#000;background-color:#fff;font-family:verdana, helvetica, sans-serif;font-size:16px;" id="yui_3_16_0_ym19_1_1478774641638_32072"><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25144">Hi All,</div><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25307">We use port 2234 for all sshd connections on our systems.</div><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25352"><br></div><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25353">It looks loke ipa-conncheck uses port 22.</div><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25354"><br></div><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25355">Can this be changed to use 2234? This would be for replicas and clients I presume.</div><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25371"><br></div><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25372">This is quite urgent.<br></div><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25373"><br></div><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25374">Many thanks,</div><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25375">James Harrison<br></div><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25376"><br></div><div id="yiv9410635192yui_3_16_0_ym19_1_1478774641638_25377"><br></div></div></div></div><br><br></div> </div> </div> </div></div></body></html>