[Freeipa-users] strange replica creation problem

[Janelle]

Happy Monday everyone,

I have a strange issue I am seeing with replica creations, but it does 
not seem to be consistent.  Sometimes, when trying to install the 
replica I get errors trying to connect to the master via SSH:

/[root at ipa3 ~]# ipa-replica-install 
/var/lib/ipa/replica-info-ipa3.xyzzy.com.gpg //
//Directory Manager (existing master) password: //
//
//Run connection check to master//
//Check connection from replica to remote master 'ipa2.xyzzy.com'://
//   Directory Service: Unsecure port (389): OK//
//   Directory Service: Secure port (636): OK//
//   Kerberos KDC: TCP (88): OK//
//   Kerberos Kpasswd: TCP (464): OK//
//   HTTP Server: Unsecure port (80): OK//
//   HTTP Server: Secure port (443): OK//
//
//The following list of ports use UDP protocol and would need to be//
//checked manually://
//   Kerberos KDC: UDP (88): SKIPPED//
//   Kerberos Kpasswd: UDP (464): SKIPPED//
//
//Connection from replica to master is OK.//
//Start listening on required ports for remote master check//
//Get credentials to log in to remote master//
//admin at XYZZY.COM password: //
//
//Check SSH connection to remote master//
//admin at ipa2.xyzzy.com's password: //
//admin at ipa2.xyzzy.com's password: //
//Could not SSH into remote host. Error output://
//    OpenSSH_6.4, OpenSSL 1.0.1e-fips 11 Feb 2013//
//    debug1: Reading configuration data /etc/ssh/ssh_config//
//    debug1: /etc/ssh/ssh_config line 51: Applying options for */


ssh via root and all the hosts - using keys - works just fine. I don't 
understand why this is happening on some hosts and not others.


Any ideas?
~J

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20141117/40a8d376/attachment.htm>