<div dir="ltr">Sadly -<div><br></div><div>I don't think that CA is installed on other replica's They were installed following the replica-prepare and replica-install process with nothing else done outside of this process to install CA.</div><div><br></div><div>I did not have backups yet when the incident occurred so I only have the replica's created from the original CA/master</div><div><br></div><div>The documentation that I was following was the following</div><div><br></div><div><a href="http://www.freeipa.org/page/Howto/Promote_CA_to_Renewal_and_CRL_Master">http://www.freeipa.org/page/Howto/Promote_CA_to_Renewal_and_CRL_Master</a><br></div><div><br></div><div>I rapidly ran into issues with this on the replica's which I suspect is due to them not having CA installed. </div><div><br></div><div>Thanks !</div><div><br></div><div>Craig</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Apr 1, 2016 at 2:15 AM, Martin Basti <span dir="ltr"><<a href="mailto:mbasti@redhat.com" target="_blank">mbasti@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"><div><div class="h5">
<br>
<br>
<div>On 31.03.2016 16:09, McNiel, Craig
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">I was installing a 7 host IPA with ipa01 being the
CA and the others being replicas of this node. This was to be
the production installation of IPA and the admins/users started
using it prior to the installation being completed and before I
had snapshots/backup created of the servers.
<div><br>
</div>
<div>The ipa01 host disk was corrupted so I no longer have a CA
just the other 6 nodes. How can I install/promote or
otherwise recreate the CA? I have looked online for
instructions but, I run into issues almost immediately with
the accuracy for the version I'm using in the documenation as
many of the files it indicates need updates don't even exist.</div>
<div><br>
</div>
<div>Thanks</div>
<div><br>
</div>
<div>
<div>ipa-python-4.2.0-15.el7.centos.3.x86_64</div>
<div>ipa-admintools-4.2.0-15.el7.centos.3.x86_64</div>
<div>ipa-server-dns-4.2.0-15.el7.centos.3.x86_64</div>
<div>sssd-ipa-1.13.0-40.el7_2.1.x86_64</div>
<div>ipa-server-4.2.0-15.el7.centos.3.x86_64</div>
<div>libipa_hbac-1.13.0-40.el7_2.1.x86_64</div>
<div>ipa-client-4.2.0-15.el7.centos.3.x86_64</div>
<div><br>
</div>
<div><br>
</div>
<br>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</blockquote></div></div>
Hello,<br>
<br>
Several things are not clear to me from you email. Can you please
answer following questions?<br>
<br>
Do you have CA installed on other replicas?<br>
Do you have backup of the original server (ipa-backup, or snapshot)?<br>
Which documentation did you follow?<br>
What did you try?<span class="HOEnZb"><font color="#888888"><br>
<br>
Martin Basti<br>
</font></span></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><font color="#674ea7"><b><br></b></font></div><b><font color="#351c75">Craig McNiel</font></b><br><br>Assessment and Instruction<div><br></div><div>2510 North Dodge Street</div><div>Iowa City, Iowa 52240</div><div><br>D: 319-341-6390<br>C: 319-430-9252<br>T: 877-627-2222 (Team On-call Support)<br><br></div><div><font color="#351c75">Pearson</font></div><div><font color="#351c75">Always Learning</font></div><div><font color="#351c75">Learn more at</font> <a href="http://www.pearsonassessments.com/" target="_blank">www.pearsonassessments.com</a></div></div></div></div></div>
</div>