<div dir="ltr">You were correct, my reverse DNS entries for the master and replica were missing. Odd, since they both existed at one point.<div><br></div><div style>Running the same commands again results in the following</div> <div style>On the Replica system</div><div style><br></div><div style>ipa-replica-manage list <a href="http://replica.example.com">replica.example.com</a> -v<br></div><div style><div><a href="http://master.example.com">master.example.com</a>: replica</div> <div> last init status: None</div><div> last init ended: None</div><div> last update status: 0 Replica acquired successfully: Incremental update succeeded</div><div> last update ended: 2013-04-05 14:18:11+00:00</div></div> <div style><br></div><div style>ipa-replica-manage list <a href="http://master.example.com">master.example.com</a> -v<br></div><div style><div>Failed to get data from '<a href="http://dpu-inf-ldap01.tni01.com">dpu-inf-ldap01.tni01.com</a>': {'info': 'SASL(-1): generic failure: GSSAPI Error: An invalid name was supplied (Cannot determine realm for numeric host address)', 'desc': 'Local error'}</div> <div>===========</div></div><div style>On the master system</div><div style><br></div><div style><div>ipa-replica-manage list <a href="http://replica.example.com">replica.example.com</a> -v</div><div><a href="http://master.example.com">master.example.com</a>: replica</div> <div> last init status: None</div><div> last init ended: None</div><div> last update status: 0 Replica acquired successfully: Incremental update succeeded</div><div> last update ended: 2013-04-05 14:19:39+00:00</div><div> <br></div><div><div>ipa-replica-manage list <a href="http://master.example.tni01.com">master.example.tni01.com</a> -v</div><div><a href="http://replica.example.com">replica.example.com</a>: replica</div><div> last init status: 0 Total update succeeded</div> <div> last init ended: 2013-04-04 20:06:44+00:00</div><div> last update status: 49 - LDAP error: Invalid credentials</div><div> last update ended: 2013-04-04 20:06:55+00:00</div></div><div><br></div></div></div><div class="gmail_extra"> <br><br><div class="gmail_quote">On Thu, Apr 4, 2013 at 2:51 PM, Rob Crittenden <span dir="ltr"><<a href="mailto:rcritten@redhat.com" target="_blank">rcritten@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Brent Clark wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im"> Ok, I have done as Steven Jones requested... here is the output from the<br> replica<br> <br> I am able to kinit to admin using the password.<br> <br> issuing the ipa-replica-manage command on the replica for the replica<br> <br> </div><a href="http://replcia.mydomain.com" target="_blank">replcia.mydomain.com</a> <<a href="http://replcia.mydomain.com" target="_blank">http://replcia.mydomain.com</a>>: replica<div class="im"><br> last init status: None<br> last init ended: None<br> last update status: -2 - System error<br> last update ended: None<br> <br> Same command but for the master<br> Failed to get data from '<a href="http://master.example.com" target="_blank">master.example.com</a><br></div> <<a href="http://master.example.com" target="_blank">http://master.example.com</a>>': {'info': SASL (-1): generic failure:<div class="im"><br> GSSAPI Error: An invalid name was supplied (Cannot determine realm for<br> numeric host address)', 'desc':'Local error'}<br> <br> I can ping, telnet on all the IPA ports and ssh to the main server from<br> the replica.<br> <br> So... im confused.<br> <br> Also on a whim, I was able to add a server to the replica and that host<br> info did make it to the master.<br> </div></blockquote> <br> Sounds like a DNS issue. Make sure forward and reverse DNS works for <a href="http://master.example.com" target="_blank">master.example.com</a>.<span class="HOEnZb"><font color="#888888"><br> <br> rob<br> <br> </font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div>Brent S. Clark</div><div>NOC Engineer</div><span style="font-size:13px;font-family:Arial,Helvetica,FreeSans,sans-serif;line-height:17.33333396911621px;background-color:rgb(255,255,255)"><br> </span><span style="background-color:rgb(255,255,255);color:rgb(112,112,112);font-family:arial,sans-serif;font-size:11px;font-weight:bold;line-height:15px">2580 55th St. | Boulder, Colorado 80301</span><span style="font-size:13px;font-family:Arial,Helvetica,FreeSans,sans-serif;line-height:17.33333396911621px;background-color:rgb(255,255,255)"><br> </span><div><div><div style="color:rgb(34,34,34);font-family:Helvetica;font-size:medium;background-color:rgb(255,255,255)"><span style="border-collapse:separate;text-align:-webkit-auto"></span><span style="font-family:arial,sans-serif;font-size:11px;font-weight:bold;line-height:15px"><a href="http://www.tendrilinc.com/" style="color:rgb(125,179,0);text-decoration:none" target="_blank">www.tendrilinc.com</a><font color="#707070"> | </font><a href="http://www.tendrilinc.com/news-room/blog/" style="color:rgb(125,179,0);text-decoration:none" target="_blank">blog</a></span></div> <div style="color:rgb(34,34,34);font-family:Helvetica;font-size:medium;background-color:rgb(255,255,255)"><span style="border-collapse:separate;text-align:-webkit-auto"></span><a href="http://www.tendrilinc.com/" style="color:rgb(17,85,204)" target="_blank"><img src="http://www.tendrilinc.com/tendril-email-logo.jpg" alt="Tendril"></a></div> </div></div><div><br></div></div> </div> <pre> This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Finally, the recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.