<div dir="ltr">Thanks for that Martin. <div><br></div><div>The man page for ipa-ca-install suggests i could pass in my replica file to create a "CA-less" configuration. Is this what i want or is a CA-full appropriate? All I want to achieve is the additional resilience provided by a replica which can both authorise and sign certificates in the event of a loss of the master server. I certainly don't want an entirely separate CA to be installed - my anticipation is that my replica will be able to become an intermediate authority - is that the intended arrangement for a replica?</div><div><br></div><div>Finally, do you hold out much hope that ipa-ca-install will work any better than --setup-ca flag I was attempting to get working for the replica install? If its the same code I would probably just end up with a half configured CA and have to rebuild my replica - something I would like to avoid repeating after the last couple of days!</div></div><br><div class="gmail_quote"><div dir="ltr">On Thu, May 18, 2017 at 1:28 PM Martin Bašti <<a href="mailto:mbasti@redhat.com">mbasti@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div text="#000000" bgcolor="#FFFFFF">
    <p>ipa-ca-install will install on top of FreeIPA CA-less replica,
      nothing else, you really don't want to do it manually.<br>
    </p></div><div text="#000000" bgcolor="#FFFFFF">
    <br>
    <div class="m_6199999182796218333moz-cite-prefix">On 18.05.2017 14:12, Callum Guy wrote:<br>
    </div>
    <blockquote type="cite">
      <div dir="ltr">Thanks Martin, really appreciate the additional
        information.
        <div><br>
        </div>
        <div>Are you aware of a separate guide for installing DogTag/PKI
          on top of FreeIPA - basically I am happy to install separately
          if it doesn't compromise the FreeIPA server configuration, i'm
          not clear on whether this is possible without a major time
          investment.</div>
      </div>
      <br>
      <div class="gmail_quote">
        <div dir="ltr">On Thu, May 18, 2017 at 12:46 PM Martin Bašti
          <<a href="mailto:mbasti@redhat.com" target="_blank">mbasti@redhat.com</a>>
          wrote:<br>
        </div>
        <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
          <div text="#000000" bgcolor="#FFFFFF">
            <p><br>
            </p>
            <p>Please note that commits in #6766 will not fix this
              issue, the issue is on dogtag side, please see <a class="m_6199999182796218333m_-1547403132022039368moz-txt-link-freetext" href="https://pagure.io/dogtagpki/issue/2646" target="_blank">https://pagure.io/dogtagpki/issue/2646</a><br>
            </p>
            Sorry for troubles</div>
          <div text="#000000" bgcolor="#FFFFFF"><br>
            <br>
            <div class="m_6199999182796218333m_-1547403132022039368moz-cite-prefix">On
              18.05.2017 12:19, Callum Guy wrote:<br>
            </div>
            <blockquote type="cite">
              <div dir="ltr">Haha, looks like i'm going CA-less for a
                while on the replica. I don't see any immediate
                requirement for one so time to get on with my life!
                <div><br>
                </div>
                <div>I'll post back if anything changes but I'm probably
                  stuck waiting for the upgrade too.. </div>
              </div>
              <br>
              <div class="gmail_quote">
                <div dir="ltr">On Thu, May 18, 2017 at 11:01 AM Lachlan
                  Musicman <<a href="mailto:datakid@gmail.com" target="_blank">datakid@gmail.com</a>>
                  wrote:<br>
                </div>
                <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                  <div dir="ltr">Sorry cobber. We only found 6766 today
                    - we've been tackling it on and off for a couple of
                    weeks :)<br>
                  </div>
                  <div class="gmail_extra"><br clear="all">
                    <div>
                      <div class="m_6199999182796218333m_-1547403132022039368m_-6042445632047873057gmail_signature" data-smartmail="gmail_signature">
                        <div dir="ltr">
                          <div>
                            <div dir="ltr">
                              <div>
                                <div dir="ltr">
                                  <div>------<br>
                                    "Mission Statement: To provide hope
                                    and inspiration for collective
                                    action, to build collective power,
                                    to achieve collective
                                    transformation, rooted in grief and
                                    rage but pointed towards vision and
                                    dreams."<br>
                                    <br>
                                     - Patrice Cullors, <i>Black Lives
                                      Matter founder</i></div>
                                </div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                    <br>
                  </div>
                  <div class="gmail_extra">
                    <div class="gmail_quote">On 18 May 2017 at 19:53,
                      Callum Guy <span dir="ltr"><<a href="mailto:callum.guy@x-on.co.uk" target="_blank">callum.guy@x-on.co.uk</a>></span>
                      wrote:<br>
                      <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                        <div dir="ltr">Ah, thanks for that Lachlan - its
                          always reassuring to hear that its not just
                          me!
                          <div><br>
                          </div>
                          <div>As mentioned above I have it running
                            without the CA so that's a good start. I am
                            sure we will upgrade as well once 4.5
                            becomes stable and GA for CentOS. I'm not
                            expecting that to happen quickly so will
                            have to work with what we have for now.</div>
                          <div><br>
                          </div>
                          <div>Do you happen to know if there is any way
                            to build the CA component separately?</div>
                        </div>
                        <div class="m_6199999182796218333m_-1547403132022039368m_-6042445632047873057HOEnZb">
                          <div class="m_6199999182796218333m_-1547403132022039368m_-6042445632047873057h5"><br>
                            <div class="gmail_quote">
                              <div dir="ltr">On Thu, May 18, 2017 at
                                10:38 AM Lachlan Musicman <<a href="mailto:datakid@gmail.com" target="_blank">datakid@gmail.com</a>>
                                wrote:<br>
                              </div>
                              <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                                <div dir="ltr">
                                  <div><a href="https://pagure.io/freeipa/issue/6766" target="_blank">https://pagure.io/freeipa/issue/6766</a><br>
                                    <br>
                                  </div>
                                  4.5.1 - I stand corrected. Can add
                                  more tomorrow.<br>
                                </div>
                                <div class="gmail_extra"><br clear="all">
                                  <div>
                                    <div class="m_6199999182796218333m_-1547403132022039368m_-6042445632047873057m_-9063019905900127394m_-5443766533895829456gmail_signature" data-smartmail="gmail_signature">
                                      <div dir="ltr">
                                        <div>
                                          <div dir="ltr">
                                            <div>
                                              <div dir="ltr">
                                                <div>------<br>
                                                  "Mission Statement: To
                                                  provide hope and
                                                  inspiration for
                                                  collective action, to
                                                  build collective
                                                  power, to achieve
                                                  collective
                                                  transformation, rooted
                                                  in grief and rage but
                                                  pointed towards vision
                                                  and dreams."<br>
                                                  <br>
                                                   - Patrice Cullors, <i>Black
                                                    Lives Matter founder</i></div>
                                              </div>
                                            </div>
                                          </div>
                                        </div>
                                      </div>
                                    </div>
                                  </div>
                                  <br>
                                </div>
                                <div class="gmail_extra">
                                  <div class="gmail_quote">On 18 May
                                    2017 at 19:34, Lachlan Musicman <span dir="ltr"><<a href="mailto:datakid@gmail.com" target="_blank">datakid@gmail.com</a>></span>
                                    wrote:<br>
                                    <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                                      <div dir="ltr">
                                        <div>
                                          <div>
                                            <div>We are seeing this. I'm
                                              not at work, but I think
                                              it's bug report 6766. <br>
                                              <br>
                                            </div>
                                            Patch has already been
                                            committed (bot by us), we're
                                            waiting for IPA 4.5.<br>
                                            <br>
                                          </div>
                                          cheers<br>
                                        </div>
                                        L.<br>
                                      </div>
                                      <div class="gmail_extra"><br clear="all">
                                        <div>
                                          <div class="m_6199999182796218333m_-1547403132022039368m_-6042445632047873057m_-9063019905900127394m_-5443766533895829456m_7779000947175413228gmail_signature" data-smartmail="gmail_signature">
                                            <div dir="ltr">
                                              <div>
                                                <div dir="ltr">
                                                  <div>
                                                    <div dir="ltr">
                                                      <div>------<br>
                                                        "Mission
                                                        Statement: To
                                                        provide hope and
                                                        inspiration for
                                                        collective
                                                        action, to build
                                                        collective
                                                        power, to
                                                        achieve
                                                        collective
                                                        transformation,
                                                        rooted in grief
                                                        and rage but
                                                        pointed towards
                                                        vision and
                                                        dreams."<br>
                                                        <br>
                                                         - Patrice
                                                        Cullors, <i>Black
                                                          Lives Matter
                                                          founder</i></div>
                                                    </div>
                                                  </div>
                                                </div>
                                              </div>
                                            </div>
                                          </div>
                                        </div>
                                        <br>
                                        <div class="gmail_quote">
                                          <div>
                                            <div class="m_6199999182796218333m_-1547403132022039368m_-6042445632047873057m_-9063019905900127394m_-5443766533895829456h5">On
                                              18 May 2017 at 18:57,
                                              Callum Guy <span dir="ltr"><<a href="mailto:callum.guy@x-on.co.uk" target="_blank">callum.guy@x-on.co.uk</a>></span>
                                              wrote:<br>
                                            </div>
                                          </div>
                                          <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                                            <div>
                                              <div class="m_6199999182796218333m_-1547403132022039368m_-6042445632047873057m_-9063019905900127394m_-5443766533895829456h5">
                                                <div dir="ltr">
                                                  <div>Hi All,</div>
                                                  <div><br>
                                                  </div>
                                                  <div>I am currently
                                                    stuck trying to
                                                    setup the first
                                                    replica of our
                                                    master IPA server. I
                                                    have tried a number
                                                    of different
                                                    approaches including
                                                    escalating from a
                                                    client and nothing
                                                    is working for me. I
                                                    perform a full OS
                                                    reset each time I
                                                    get stuck.</div>
                                                  <div><br>
                                                  </div>
                                                  <div>I'm running
                                                    CentOS 7.2 with the
                                                    FreeIPA 4.4.0 (rpm
                                                    -q reports this
                                                    version however
                                                    having performed
                                                    ipa-server-upgrade -
                                                    does this mean i'm
                                                    on 4.4.4?).</div>
                                                  <div><br>
                                                  </div>
                                                  <div>The command is
                                                    shown below - note
                                                    that i am skipping
                                                    the conn check as my
                                                    platforms security
                                                    settings do not
                                                    allow the SSH
                                                    session to be
                                                    established back on
                                                    the master, all
                                                    ports should be
                                                    available to the
                                                    application however.</div>
                                                  <div><br>
                                                  </div>
                                                  <div>[root@ipa2 ~]#
                                                    ipa-replica-install
--ip-address=172.24.0.101 --setup-ca --setup-dns --skip-conncheck
                                                    --no-forwarders SITE.net.gpg</div>
                                                  <div><br>
                                                  </div>
                                                  <div>Directory Manager
                                                    (existing master)
                                                    password:</div>
                                                  <div><br>
                                                  </div>
                                                  <div>ipa         :
                                                    ERROR    Could not
                                                    resolve hostname <a href="http://ipa2.SITE.net" target="_blank">ipa2.SITE.net</a>
                                                    usis check queries
                                                    IPA DNS directly and
                                                    ignores /etc/hosts.)</div>
                                                  <div>Continue? [no]:
                                                    yes</div>
                                                  <div>Configuring NTP
                                                    daemon (ntpd)</div>
                                                  <div>  [1/4]: stopping
                                                    ntpd</div>
                                                  <div>  [2/4]: writing
                                                    configuration</div>
                                                  <div>  [3/4]:
                                                    configuring ntpd to
                                                    start on boot</div>
                                                  <div>  [4/4]: starting
                                                    ntpd</div>
                                                  <div>Done configuring
                                                    NTP daemon (ntpd).</div>
                                                  <div>Configuring
                                                    directory server
                                                    (dirsrv). Estimated
                                                    time: 1 minute</div>
                                                  <div>  [1/42]:
                                                    creating directory
                                                    server user</div>
                                                  <div>  [2/42]:
                                                    creating directory
                                                    server instance</div>
                                                  <div>  [3/42]:
                                                    updating
                                                    configuration in
                                                    dse.ldif</div>
                                                  <div>  [4/42]:
                                                    restarting directory
                                                    server</div>
                                                  <div>  [5/42]: adding
                                                    default schema</div>
                                                  <div>  [6/42]:
                                                    enabling memberof
                                                    plugin</div>
                                                  <div>  [7/42]:
                                                    enabling winsync
                                                    plugin</div>
                                                  <div>  [8/42]:
                                                    configuring
                                                    replication version
                                                    plugin</div>
                                                  <div>  [9/42]:
                                                    enabling IPA
                                                    enrollment plugin</div>
                                                  <div>  [10/42]:
                                                    enabling ldapi</div>
                                                  <div>  [11/42]:
                                                    configuring
                                                    uniqueness plugin</div>
                                                  <div>  [12/42]:
                                                    configuring uuid
                                                    plugin</div>
                                                  <div>  [13/42]:
                                                    configuring modrdn
                                                    plugin</div>
                                                  <div>  [14/42]:
                                                    configuring DNS
                                                    plugin</div>
                                                  <div>  [15/42]:
                                                    enabling entryUSN
                                                    plugin</div>
                                                  <div>  [16/42]:
                                                    configuring lockout
                                                    plugin</div>
                                                  <div>  [17/42]:
                                                    configuring topology
                                                    plugin</div>
                                                  <div>  [18/42]:
                                                    creating indices</div>
                                                  <div>  [19/42]:
                                                    enabling referential
                                                    integrity plugin</div>
                                                  <div>  [20/42]:
                                                    configuring ssl for
                                                    ds instance</div>
                                                  <div>  [21/42]:
                                                    configuring
                                                    certmap.conf</div>
                                                  <div>  [22/42]:
                                                    configure autobind
                                                    for root</div>
                                                  <div>  [23/42]:
                                                    configure new
                                                    location for managed
                                                    entries</div>
                                                  <div>  [24/42]:
                                                    configure dirsrv
                                                    ccache</div>
                                                  <div>  [25/42]:
                                                    enabling SASL
                                                    mapping fallback</div>
                                                  <div>  [26/42]:
                                                    restarting directory
                                                    server</div>
                                                  <div>  [27/42]:
                                                    setting up initial
                                                    replication</div>
                                                  <div>Starting
                                                    replication, please
                                                    wait until this has
                                                    completed.</div>
                                                  <div>Update in
                                                    progress, 4 seconds
                                                    elapsed</div>
                                                  <div>Update succeeded</div>
                                                  <div><br>
                                                  </div>
                                                  <div>  [28/42]: adding
                                                    sasl mappings to the
                                                    directory</div>
                                                  <div>  [29/42]:
                                                    updating schema</div>
                                                  <div>  [30/42]:
                                                    setting Auto Member
                                                    configuration</div>
                                                  <div>  [31/42]:
                                                    enabling S4U2Proxy
                                                    delegation</div>
                                                  <div>  [32/42]:
                                                    importing CA
                                                    certificates from
                                                    LDAP</div>
                                                  <div>  [33/42]:
                                                    initializing group
                                                    membership</div>
                                                  <div>  [34/42]: adding
                                                    master entry</div>
                                                  <div>  [35/42]:
                                                    initializing domain
                                                    level</div>
                                                  <div>  [36/42]:
                                                    configuring Posix
                                                    uid/gid generation</div>
                                                  <div>  [37/42]: adding
                                                    replication acis</div>
                                                  <div>  [38/42]:
                                                    enabling
                                                    compatibility plugin</div>
                                                  <div>  [39/42]:
                                                    activating sidgen
                                                    plugin</div>
                                                  <div>  [40/42]:
                                                    activating extdom
                                                    plugin</div>
                                                  <div>  [41/42]: tuning
                                                    directory server</div>
                                                  <div>  [42/42]:
                                                    configuring
                                                    directory to start
                                                    on boot</div>
                                                  <div>Done configuring
                                                    directory server
                                                    (dirsrv).</div>
                                                  <div>Configuring
                                                    certificate server
                                                    (pki-tomcatd).
                                                    Estimated time: 3
                                                    minutes 30 seconds</div>
                                                  <div>  [1/27]:
                                                    creating certificate
                                                    server user</div>
                                                  <div>  [2/27]:
                                                    configuring
                                                    certificate server
                                                    instance</div>
                                                  <div>  [3/27]:
                                                    stopping certificate
                                                    server instance to
                                                    update CS.cfg</div>
                                                  <div>  [4/27]: backing
                                                    up CS.cfg</div>
                                                  <div>  [5/27]:
                                                    disabling nonces</div>
                                                  <div>  [6/27]: set up
                                                    CRL publishing</div>
                                                  <div>  [7/27]: enable
                                                    PKIX certificate
                                                    path discovery and
                                                    validation</div>
                                                  <div>  [8/27]:
                                                    starting certificate
                                                    server instance</div>
                                                  <div><br>
                                                  </div>
                                                  <div>And here is stays
                                                    and refuses to move
                                                    on. The
                                                    ipareplica-install.log
                                                    log reports:</div>
                                                  <div>
                                                    <div>2017-05-18T08:40:07Z
                                                      DEBUG
                                                      wait_for_open_ports:
                                                      localhost [8080,
                                                      8443] timeout 300</div>
                                                    <div>2017-05-18T08:40:09Z
                                                      DEBUG Waiting
                                                      until the CA is
                                                      running</div>
                                                    <div>2017-05-18T08:40:09Z
                                                      DEBUG request POST
                                                      <a href="http://ipa2.SITE.net:8080/ca/admin/ca/getStatus" target="_blank">http://ipa2.SITE.net:8080/ca/admin/ca/getStatus</a></div>
                                                    <div>2017-05-18T08:40:09Z
                                                      DEBUG request body
                                                      ''</div>
                                                  </div>
                                                  <div><br>
                                                  </div>
                                                  <div>I have tried and
                                                    that port is indeed
                                                    inaccessible but I
                                                    can't establish a
                                                    way to progress this
                                                    issue from any of
                                                    the the other log
                                                    files. Also I have
                                                    seen in the 4.4.4
                                                    release notes that
                                                    IPv6 being disabled
                                                    on the master can
                                                    cause issues,
                                                    re-enabling (at
                                                    least in /etc/hosts)
                                                    did not seem to
                                                    help.</div>
                                                  <div><br>
                                                  </div>
                                                  <div>If anyone is able
                                                    to offer ideas that
                                                    would be very much
                                                    appreciated. I am
                                                    tempted to remove
                                                    the --setup-ca
                                                    option to see if
                                                    this helps.</div>
                                                  <div><br>
                                                  </div>
                                                  <div>Thanks,</div>
                                                  <div><br>
                                                  </div>
                                                  <div>Callum</div>
                                                  <div><br>
                                                  </div>
                                                </div>
                                                <br>
                                                <p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;text-align:justify"><font size="3" face="Verdana"><span style="font-size:8px;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span></font></p>
                                                <img src="http://www.x-on.co.uk/email/footer/banner-surgeryconnect-may.jpg"><br>
                                                <p><font size="4"><span style="font-size:8px;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span><b><sup><font face="Verdana">0333
                                                          332 0000  |  <a href="http://www.x-on.co.uk" target="_blank">www.x-on.co.uk</a> 
                                                          |  <sub> </sub></font></sup></b></font><font size="4"><b><sub><sup><font face="Verdana"><a href="https://www.linkedin.com/company/x-on" target="_blank"><img src="http://www.x-on.co.uk//images/icon/linkedin.png" width="24" height="24"></a>
                                                           <a href="https://www.facebook.com/XonTel" target="_blank"><img src="http://www.x-on.co.uk//images/icon/facebook.png" width="24" height="24"></a>  <a href="https://twitter.com/xonuk" target="_blank"><img src="http://www.x-on.co.uk//images/icon/twitter.png" width="24" height="24"></a></font></sup></sub> </b></font>
                                                  <span style="font-size:6.0pt;font-family:Verdana;color:black"><br>
                                                    X-on is a trading
                                                    name of Storacall
                                                    Technology Ltd a
                                                    limited company
                                                    registered in
                                                    England and Wales.<br>
                                                    Registered Office :
                                                    Avaland House, 110
                                                    London Road, Apsley,
                                                    Hemel Hempstead,
                                                    Herts, HP3 9SD.
                                                    Company Registration
                                                    No. 2578478.<br>
                                                    The information in
                                                    this e-mail is
                                                    confidential and for
                                                    use by the
                                                    addressee(s) only.
                                                    If you are not the
                                                    intended recipient,
                                                    please notify X-on
                                                    immediately on <span><a href="tel:+44%20333%20332%200000" value="+443333320000" target="_blank">+44(0)333 332 0000</a></span> and delete the<br>
                                                    message from your
                                                    computer. If you are
                                                    not a named
                                                    addressee you must
                                                    not use, disclose,
                                                    disseminate,
                                                    distribute, copy,
                                                    print or reply to
                                                    this email. </span><span style="font-size:6.0pt;font-family:Verdana;color:black">Views or
                                                    opinions expressed
                                                    by an individual<br>
                                                    within this email
                                                    may not necessarily
                                                    reflect the views of
                                                    X-on or its
                                                    associated
                                                    companies. Although
                                                    X-on routinely
                                                    screens for viruses,
                                                    addressees should
                                                    scan this email and
                                                    any attachments<br>
                                                    for viruses. X-on
                                                    makes no
                                                    representation or
                                                    warranty as to the
                                                    absence of viruses
                                                    in this email or any
                                                    attachments.</span></p>
                                                <p><span style="font-size:6.0pt;font-family:Verdana;color:black"></span><font size="2"><span style="font-size:6.0pt;font-family:Verdana;color:black"></span></font></p>
                                                <br>
                                              </div>
                                            </div>
                                            <span class="m_6199999182796218333m_-1547403132022039368m_-6042445632047873057m_-9063019905900127394m_-5443766533895829456HOEnZb"><font color="#888888">--<br>
                                                Manage your subscription
                                                for the Freeipa-users
                                                mailing list:<br>
                                                <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
                                                Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a>
                                                for more info on the
                                                project<br>
                                              </font></span></blockquote>
                                        </div>
                                        <br>
                                      </div>
                                    </blockquote>
                                  </div>
                                  <br>
                                </div>
                              </blockquote>
                            </div>
                            <br>
                            <p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;text-align:justify"><font size="3" face="Verdana"><span style="font-size:8px;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span></font></p>
                            <img src="http://www.x-on.co.uk/email/footer/banner-surgeryconnect-may.jpg"><br>
                            <p><font size="4"><span style="font-size:8px;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span><b><sup><font face="Verdana">0333 332 0000  |  <a href="http://www.x-on.co.uk" target="_blank">www.x-on.co.uk</a> 
                                      |  <sub> </sub></font></sup></b></font><font size="4"><b><sub><sup><font face="Verdana"><a href="https://www.linkedin.com/company/x-on" target="_blank"><img src="http://www.x-on.co.uk//images/icon/linkedin.png" width="24" height="24"></a>
                                         <a href="https://www.facebook.com/XonTel" target="_blank"><img src="http://www.x-on.co.uk//images/icon/facebook.png" width="24" height="24"></a>
                                         <a href="https://twitter.com/xonuk" target="_blank"><img src="http://www.x-on.co.uk//images/icon/twitter.png" width="24" height="24"></a></font></sup></sub>
                                </b></font> <span style="font-size:6.0pt;font-family:Verdana;color:black"><br>
                                X-on is a trading name of Storacall
                                Technology Ltd a limited company
                                registered in England and Wales.<br>
                                Registered Office : Avaland House, 110
                                London Road, Apsley, Hemel Hempstead,
                                Herts, HP3 9SD. Company Registration No.
                                2578478.<br>
                                The information in this e-mail is
                                confidential and for use by the
                                addressee(s) only. If you are not the
                                intended recipient, please notify X-on
                                immediately on <span><a href="tel:+44%20333%20332%200000" value="+443333320000" target="_blank">+44(0)333 332
                                    0000</a></span> and delete the<br>
                                message from your computer. If you are
                                not a named addressee you must not use,
                                disclose, disseminate, distribute, copy,
                                print or reply to this email. </span><span style="font-size:6.0pt;font-family:Verdana;color:black">Views or
                                opinions expressed by an individual<br>
                                within this email may not necessarily
                                reflect the views of X-on or its
                                associated companies. Although X-on
                                routinely screens for viruses,
                                addressees should scan this email and
                                any attachments<br>
                                for viruses. X-on makes no
                                representation or warranty as to the
                                absence of viruses in this email or any
                                attachments.</span></p>
                            <p><span style="font-size:6.0pt;font-family:Verdana;color:black"></span><font size="2"><span style="font-size:6.0pt;font-family:Verdana;color:black"></span></font></p>
                          </div>
                        </div>
                      </blockquote>
                    </div>
                    <br>
                  </div>
                </blockquote>
              </div>
              <br>
              <p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;text-align:justify"><font size="3" face="Verdana"><span style="font-size:8px;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span></font></p>
              <img src="http://www.x-on.co.uk/email/footer/banner-surgeryconnect-may.jpg"><br>
              <p><font size="4"><span style="font-size:8px;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span><b><sup><font face="Verdana">0333 332 0000  |  <a href="http://www.x-on.co.uk" target="_blank">www.x-on.co.uk</a>  |  <sub> </sub></font></sup></b></font><font size="4"><b><sub><sup><font face="Verdana"><a href="https://www.linkedin.com/company/x-on" target="_blank"><img src="http://www.x-on.co.uk//images/icon/linkedin.png" width="24" height="24"></a>  <a href="https://www.facebook.com/XonTel" target="_blank"><img src="http://www.x-on.co.uk//images/icon/facebook.png" width="24" height="24"></a>  <a href="https://twitter.com/xonuk" target="_blank"><img src="http://www.x-on.co.uk//images/icon/twitter.png" width="24" height="24"></a></font></sup></sub> </b></font>
                <span style="font-size:6.0pt;font-family:Verdana;color:black"><br>
                  X-on is a trading name of Storacall Technology Ltd a
                  limited company registered in England and Wales.<br>
                  Registered Office : Avaland House, 110 London Road,
                  Apsley, Hemel Hempstead, Herts, HP3 9SD. Company
                  Registration No. 2578478.<br>
                  The information in this e-mail is confidential and for
                  use by the addressee(s) only. If you are not the
                  intended recipient, please notify X-on immediately on
                  <span><a href="tel:+44%20333%20332%200000" value="+443333320000" target="_blank">+44(0)333 332 0000</a></span>
                  and delete the<br>
                  message from your computer. If you are not a named
                  addressee you must not use, disclose, disseminate,
                  distribute, copy, print or reply to this email. </span><span style="font-size:6.0pt;font-family:Verdana;color:black">Views or
                  opinions expressed by an individual<br>
                  within this email may not necessarily reflect the
                  views of X-on or its associated companies. Although
                  X-on routinely screens for viruses, addressees should
                  scan this email and any attachments<br>
                  for viruses. X-on makes no representation or warranty
                  as to the absence of viruses in this email or any
                  attachments.</span></p>
              <p><span style="font-size:6.0pt;font-family:Verdana;color:black"></span><font size="2"><span style="font-size:6.0pt;font-family:Verdana;color:black"></span></font></p>
              <br>
              <fieldset class="m_6199999182796218333m_-1547403132022039368mimeAttachmentHeader"></fieldset>
              <br>
            </blockquote>
            <br>
          </div>
          <div text="#000000" bgcolor="#FFFFFF">
            <pre class="m_6199999182796218333m_-1547403132022039368moz-signature" cols="72">-- 
Martin Bašti
Software Engineer
Red Hat Czech</pre>
          </div>
        </blockquote>
      </div>
      <br>
      <p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;text-align:justify"><font size="3" face="Verdana"><span style="font-size:8px;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span></font></p>
      <img src="http://www.x-on.co.uk/email/footer/banner-surgeryconnect-may.jpg"><br>
      <p><font size="4"><span style="font-size:8px;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span><b><sup><font face="Verdana">0333 332 0000  |  <a href="http://www.x-on.co.uk" target="_blank">www.x-on.co.uk</a>  |  <sub> </sub></font></sup></b></font><font size="4"><b><sub><sup><font face="Verdana"><a href="https://www.linkedin.com/company/x-on" target="_blank"><img src="http://www.x-on.co.uk//images/icon/linkedin.png" width="24" height="24"></a>
                   <a href="https://www.facebook.com/XonTel" target="_blank"><img src="http://www.x-on.co.uk//images/icon/facebook.png" width="24" height="24"></a>
                   <a href="https://twitter.com/xonuk" target="_blank"><img src="http://www.x-on.co.uk//images/icon/twitter.png" width="24" height="24"></a></font></sup></sub>
          </b></font>
        <span style="font-size:6.0pt;font-family:Verdana;color:black"><br>
          X-on
          is a trading name of Storacall Technology Ltd a limited
          company registered in
          England and Wales.<br>
          Registered Office : Avaland House, 110 London Road, Apsley,
          Hemel Hempstead,
          Herts, HP3 9SD. Company Registration No. 2578478.<br>
          The information in this e-mail is confidential and for use by
          the addressee(s)
          only. If you are not the intended recipient, please notify
          X-on immediately on <span><a href="tel:+44%20333%20332%200000" value="+443333320000" target="_blank">+44(0)333 332 0000</a></span> and
          delete the<br>
          message from your computer. If you are not a named addressee
          you must not use,
          disclose, disseminate, distribute, copy, print or reply to
          this email. </span><span style="font-size:6.0pt;font-family:Verdana;color:black">Views
          or opinions expressed by an individual<br>
          within this email may not necessarily
          reflect the views of X-on or its associated companies.
          Although X-on routinely
          screens for viruses, addressees should scan this email and any
          attachments<br>
          for
          viruses. X-on makes no representation or warranty as to the
          absence of viruses
          in this email or any attachments.</span></p>
      <p><span style="font-size:6.0pt;font-family:Verdana;color:black"></span><font size="2"><span style="font-size:6.0pt;font-family:Verdana;color:black"></span></font></p>
    </blockquote>
    <br>
    <pre class="m_6199999182796218333moz-signature" cols="72">-- 
Martin Bašti
Software Engineer
Red Hat Czech</pre>
  </div></blockquote></div>

<br>
<p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;text-align:justify"><font size="3" face="Verdana"><span style="font-size:8px;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span></font></p><img src="http://www.x-on.co.uk/email/footer/banner-surgeryconnect-may.jpg"><br><p><font size="4"><span style="font-size:8px;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"></span><b><sup><font face="Verdana">0333 332 0000  |  <a href="http://www.x-on.co.uk" target="_blank">www.x-on.co.uk</a>  |  <sub> </sub></font></sup></b></font><font size="4"><b><sub><sup><font face="Verdana"><a href="https://www.linkedin.com/company/x-on" target="_blank"><img src="http://www.x-on.co.uk//images/icon/linkedin.png" width="24" height="24"></a>  <a href="https://www.facebook.com/XonTel" target="_blank"><img src="http://www.x-on.co.uk//images/icon/facebook.png" width="24" height="24"></a>  <a href="https://twitter.com/xonuk" target="_blank"><img src="http://www.x-on.co.uk//images/icon/twitter.png" width="24" height="24"></a></font></sup></sub> </b></font>

























<span style="font-size:6.0pt;font-family:Verdana;color:black"><br>X-on
is a trading name of Storacall Technology Ltd a limited company registered in
England and Wales.<br>
Registered Office : Avaland House, 110 London Road, Apsley, Hemel Hempstead,
Herts, HP3 9SD. Company Registration No. 2578478.<br>
The information in this e-mail is confidential and for use by the addressee(s)
only. If you are not the intended recipient, please notify X-on immediately on <span>+44(0)333 332 0000</span> and delete the<br>message from your computer. If you are not a named addressee you must not use,
disclose, disseminate, distribute, copy, print or reply to this email. </span><span style="font-size:6.0pt;font-family:Verdana;color:black">Views
or opinions expressed by an individual<br>within this email may not necessarily
reflect the views of X-on or its associated companies. Although X-on routinely
screens for viruses, addressees should scan this email and any attachments<br>for
viruses. X-on makes no representation or warranty as to the absence of viruses
in this email or any attachments.</span></p>





<p><span style="font-size:6.0pt;font-family:Verdana;color:black"></span><font size="2"><span style="font-size:6.0pt;font-family:Verdana;color:black"></span></font></p>