[Freeipa-users] IPA replica without CA, how to become CA

[Rob Crittenden]

Matt . wrote:
> Hi All,
>
> I'm cleaning up and playing around with some old dev setups and
> reviewing these tests.
>
> This is a replica setup but the replica is no CA. Now I'm testing out
> how to manage cluster when I remove the ipa1 (CA)  and create a new
> replica with CA from the ipa2.
>
> IPA2 should become CA and out of that I can setup a replica again.
> What is my best approach to test this ?

Hard to say given I have no insight into your topology, but to add a CA 
post-install use ipa-ca-install <replica-file>

rob