[Freeipa-users] error install replication

[Martin Kosek]

On 02/09/2015 07:42 AM, alireza baghery wrote:
> i check on both server ssh each other's name and ssh successful and resolve
> name was also correct on each server
> but i can not login with user admin from ipareplica via ssh (root at ipareplica]#
> ssh admin at ipasrv ===> failed)
> 
> [root at ipareplica ~]# ssh ipasrv
> root at ipasrv's password:
> Last login: Mon Feb  9 09:49:54 2015 from 10.30.160.20
> =====log /var/secure====
> Feb  9 09:50:29 ipasrv sshd[12076]: Accepted password for root from
> 10.30.160.20 port 52110 ssh2
> Feb  9 09:50:29 ipasrv sshd[12076]: pam_unix(sshd:session): session opened
> for user root by (uid=0)
> =====
> [root at ipasrv ~]# ssh ipareplica
> root at ipareplica's password:
> Last login: Mon Feb  9 09:50:20 2015 from 10.30.160.19
> 
> ======
> [root at ipareplica ~]# nslookup ipasrv
> Server:         10.30.160.19
> Address:        10.30.160.19#53
> 
> Name:   ipasrv
> Address: 10.30.160.19
> 
> ========
> [root at ipasrv ~]# nslookup ipareplica
> Server:         127.0.0.1
> Address:        127.0.0.1#53
> 
> Name:   ipareplica
> Address: 10.30.160.20
> =========

Ok, so ssh is running, you can log in with root. I think that by 99% chance,
your SSSD service is not running on the IPA server. Please check if this is the
case and if yes, please try to (re)start it. If that helped, it would be also
useful to see *why* the SSSD is not running (crash, misconfiguration, ...)

Martin