On Thu, 2011-09-08 at 17:24 -0400, Rob Crittenden wrote: > When using a selfsign CA you can't run ipa-ca-install at all and you can > only run ipa-replica-prepare on the initial master. > > rob ACK. Works fine. Rebased and pushed to master, ipa-2-1. Martin