[Freeipa-users] Replica without CA: implications?

[Simo Sorce]

On Wed, 2016-03-09 at 15:59 +0000, Cal Sawyer wrote:
> Hi
> 
> Somehow i picked the wrong cookbook when i provisioned my first (and 
> only) replica and it lacks CA aso, as pointed out in a recent thread, 
> creates a single point of failure.  Not ready to set up more 2 replicas 
> yet and am still in testing.  Is it possible to replicate the master's 
> CA to the replica without destroying and reprovisioning with --setup-ca 
> this time?

Use ipa-ca-install on the replica.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York