[Freeipa-users] trying to get a RHEL7.1 beta second master into a RHEL6.6 cluster so I can upgrade.

[Martin Kosek]

On 02/17/2015 12:08 AM, Rob Crittenden wrote:
> Steven Jones wrote:
>> ?
>>
>> ====
>> [root at xx ipa]# ldapsearch -Y GSSAPI -b cn=CAcert,cn=ipa,cn=etc,$SUFFIX
>> SASL/GSSAPI authentication started
>> SASL username:   xxxx
>> SASL SSF: 56
>> SASL data security layer installed.
>> # extended LDIF
>> #
>> # LDAPv3
>> # base <cn=CAcert,cn=ipa,cn=etc,> with scope subtree
>> # filter: (objectclass=*)
>> # requesting: ALL
>> #
>>
>> # search result
>> search: 4
>> result: 32 No such object
>>
>> # numResponses: 1
> 
> Did you literally use $SUFFIX? You need to use dc=example,dc=com,
> whatever is appropriate for your install.
> 
> rob

Right. Or even easier is to simply delete cn=CAcert,cn=ipa,cn=etc,SUFFIX and
then running

# ipa-ldap-updater --upgrade

again. upload_cacrt.py plugin should simply re-upload the properly encoded
certificate.