[Freeipa-users] Not able to pass through ipa-replica-install on centos 7

[Martin Basti]

On 18.10.2016 17:02, Martin Babinsky wrote:
> On 10/18/2016 04:59 PM, Deepak Dimri wrote:
>> Hi Martin, Before running ipa-replica-install do i need to run
>> ipa-server-install script on the replica?
>>
>>
>> I am installing ipa-server-install script on the replica and then If i
>> install ipa-replica-install without uninstalling ipa server then i get
>> below errors:
>>
>
Please read docs.
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html#install-replica

> No there should be *no* IPa server neither client installed on the 
> replica machine, there just needs to be *some* IPA master in some 
> other machine to prepare a replica file.
>
> Just run ipa-replica-install on the replica and make sure that *no* 
> ipa-server-install/ipa-client-install were run before that.

>
>>>>  [root at ip-172-31-23-230 ipa]#
>>>> ipa-replica-install /var/lib/ipa/replica-info-replica.ipa.com.gpg
>>>>  ipa.ipapython.install.cli.install_tool(Replica): ERROR IPA
>>>> client is already configured on this system.
>>>> Please uninstall it first before configuring the replica,
>>>> using 'ipa-client-install --uninstall'.
>>>>
>>>> when i try 'ipa-client-install --uninstall' then i am getting bellow
>>>>
>>>> ipa-client-install --uninstall IPA client is configured as a part of
>>>> IPA server on this system. Refer to ipa-server-install for 
>>>> uninstallation
>>>>
>> Thanks,
>>
>> Deepak
>>
>>
>>
>> ------------------------------------------------------------------------
>> *From:* Martin Basti <mbasti at redhat.com>
>> *Sent:* Tuesday, October 18, 2016 8:40 AM
>> *To:* Deepak Dimri; Martin Babinsky; freeipa-users at redhat.com
>> *Subject:* Re: [Freeipa-users] Not able to pass through
>> ipa-replica-install on centos 7
>>
>>
>>
>>
>> On 18.10.2016 13:52, Deepak Dimri wrote:
>>>
>>> Thanks Martin, I had to run ipa-server-install --uninstall -U to get
>>> rid of IPA client error message on the replica server and then re run
>>> ipa-replica-install script to run it ok. But it does not look clean
>>> through - as i understand we do need to run ipa-server-install script
>>> ( same as master) on the replica server but that script by default
>>> installs the ipa client which then cause replica install to fail.  Is
>>> there any way i can avoid IPA client installation on replica?
>>>
>>>
>>
>> You need to run ipa-replica-install installer and client is required
>> part of any server. Can you be more specific what kind of errors are you
>> getting? Logs?
>>
>> Martin^2
>>>
>>> Thanks,
>>>
>>> Deepak
>>>
>>>
>>>
>>> ------------------------------------------------------------------------ 
>>>
>>> *From:* Martin Babinsky <mbabinsk at redhat.com>
>>> *Sent:* Monday, October 17, 2016 1:29 AM
>>> *To:* Deepak Dimri; Martin Basti; freeipa-users at redhat.com
>>> *Subject:* Re: [Freeipa-users] Not able to pass through
>>> ipa-replica-install on centos 7
>>>
>>> On 10/15/2016 12:41 PM, Deepak Dimri wrote:
>>> > Thanks Martin for the reply.
>>> >
>>> > when i try 'ipa-client-install --uninstall' then i am getting bellow
>>> > message:
>>> >
>>> >
>>> > ipa-client-install --uninstall
>>> > IPA client is configured as a part of IPA server on this system.
>>> > Refer to ipa-server-install for uninstallation.
>>> >
>>> >
>>> > How can i raise domain level to 1 in v4? i tried
>>> >
>>> > ipa *domainlevel-set* 1
>>> >
>>> > but i am getting ipa: ERROR: unknown command 'domainlevel-set'
>>> >
>>> > Thanks again for your help on this.
>>> >
>>> > Best Regards,
>>> > Deepak
>>> >
>>> >
>>>
>>> Hi Deepak,
>>>
>>> IIRC Centos 7 has FreeIPA 4.2.0-15 that does not support replica
>>> promotion and domain levels other than 0.
>>>
>>> The error from ipa-replica-install comes probably from a leftovers of
>>> previous client enrollment.
>>>
>>> Just run `ipa-client-install --uninstall -U` and then re-run replica
>>> installation as usual.
>>>
>>> > 
>>> ------------------------------------------------------------------------ 
>>>
>>> > *From:* Martin Basti <mbasti at redhat.com>
>>> > *Sent:* Saturday, October 15, 2016 4:54 AM
>>> > *To:* Deepak Dimri; freeipa-users at redhat.com
>>> > *Subject:* Re: [Freeipa-users] Not able to pass through
>>> > ipa-replica-install on centos 7
>>> >
>>> >
>>> >
>>> >
>>> > On 14.10.2016 18:58, Deepak Dimri wrote:
>>> >>
>>> >> Hi All,
>>> >>
>>> >>
>>> >> I am trying to configure replication between two FreeIPA centos 7
>>> >> servers.  As per the document i need  same FreeIPA version 
>>> running on
>>> >> both the machines, which i have, and run ipa-replica-prepare on the
>>> >> master and then simply run ipa-replica-install on the replica server
>>> >> along with replica file.  But i am unable to get pass the below 
>>> error
>>> >> message:
>>> >>
>>> >>
>>> >> [root at ip-172-31-23-230 ipa]# ipa-replica-install
>>> >> /var/lib/ipa/replica-info-replica.ipa.com.gpg
>>> >>
>>> >> ipa.ipapython.install.cli.install_tool(Replica): ERROR    IPA client
>>> >> is already configured on this system.
>>> >>
>>> >> Please uninstall it first before configuring the replica, using
>>> >> 'ipa-client-install --uninstall'.
>>> >>
>>> >>
>>> >> What should i be doing to get around this error? the error looks
>>> >> missleading as i am trying to install replica and not ipa client
>>> >>
>>> >>
>>> >> Thanks,
>>> >>
>>> >> Deepak
>>> >>
>>> >>
>>> >>
>>> > Hi,
>>> >
>>> > have you tried ipa-client-install --uninstall?
>>> >
>>> > Replica cannot be installed on system where client is already 
>>> installed
>>> > (with domain level 0, your case)
>>> >
>>> > Martin
>>> >
>>> >
>>>
>>>
>>> -- 
>>> Martin^3 Babinsky
>>
>
>