<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi,<br>
<br>
In case everyone else is asleep now......<br>
<br>
Do you have access to RH documentation? the 6.3beta admin guide section 18.8 talks about why and how to make a replicate a master.<br>
<br>
eg.,<br>
<br>
"NOTE<br>
All servers and replicas which host a CA are peers in the topology. They can all issue certificates<br>
and keys to IPA clients, and they all replicate information amongst themselves.<br>
The only reason to promote a replica or server to be a master server is if the master server is<br>
being taken offline. There has to be a root CA which can issue CRLs and ultimately validate<br>
certificate checks.<br>
Aside from that, replicas, servers, and the master server are all equal peers."<br>
<br>
<div>regards
<div style="font-family: Tahoma; font-size: 13px;">
<p>Steven Jones</p>
<p>Technical Specialist - Linux RHCE</p>
<p>Victoria University, Wellington, NZ</p>
<p>0064 4 463 6272<br>
</p>
</div>
</div>
<div style="font-family: Times New Roman; color: rgb(0, 0, 0); font-size: 16px;">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF770740"><font color="#000000" face="Tahoma" size="2"><b>From:</b> freeipa-users-bounces@redhat.com [freeipa-users-bounces@redhat.com] on behalf of David Copperfield [cao2dan@yahoo.com]<br>
<b>Sent:</b> Thursday, 10 May 2012 11:04 a.m.<br>
<b>To:</b> Rob Crittenden; Freeipa-users@redhat.com<br>
<b>Subject:</b> [Freeipa-users] How to rebuild IPA master?<br>
</font><br>
</div>
<div></div>
<div>
<div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: times new roman,new york,times,serif; font-size: 12pt;">
<div>Hi all,</div>
<div><br>
</div>
<div> I've a IPA master/replica setup in our development environment. Unfortunately our IPA master crashed, the replica is working fine. Now I have the IPA master re-imaged.</div>
<div><br>
</div>
<div> What are the steps I have to follow to re-create the IPA master from running IPA replica? Before crash the IPA master ran dogtag certificate system, while the IPA replica didn't -- created normally without the --setup-ca option.</div>
<div><br>
</div>
<div> Thanks.</div>
<div><br>
</div>
<div>--David</div>
</div>
</div>
</div>
</div>
</body>
</html>