<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1460001886615_23215">I've setup an initial FreeIPA instance on a CentOS 7 host. The install went without a hitch. I can login to the GUI with no problems. However, I am not able to install the replica on another CentOS 7 host. I get the following errors:<br></div><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" id="yui_3_16_0_ym19_1_1460001886615_23222" style="display: block;"><div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1460001886615_23221"><div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1460001886615_23220"><div class="y_msg_container" id="yui_3_16_0_ym19_1_1460001886615_23234"><div id="yiv1029346875"><div style="color:#000;background-color:#fff;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;" id="yui_3_16_0_ym19_1_1460001886615_23233"><div id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4307" dir="ltr"><br></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4473">[root@ipa2 ~]# ipa-replica-install --setup-ca --setup-dns --no-forwarders /var/lib/ipa/replica-info-ipa2.nrln.us.gpg --skip-conncheck</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4474">WARNING: conflicting time&date synchronization service 'chronyd' will</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4475">be disabled in favor of ntpd</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4476"><br id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4477"></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4478">Directory Manager (existing master) password:</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4479"><br id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4480"></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4481">Existing BIND configuration detected, overwrite? [no]: yes</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4482">Using reverse zone(s) 1.168.192.in-addr.arpa.</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4483">Configuring NTP daemon (ntpd)</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4484"> [1/4]: stopping ntpd</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4485"> [2/4]: writing configuration</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4486"> [3/4]: configuring ntpd to start on boot</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4487"> [4/4]: starting ntpd</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4488">Done configuring NTP daemon (ntpd).</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4489">Configuring directory server (dirsrv). Estimated time: 1 minute</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4490"> [1/38]: creating directory server user</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4491"> [2/38]: creating directory server instance</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4492"> [3/38]: adding default schema</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4493"> [4/38]: enabling memberof plugin</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4494"> [5/38]: enabling winsync plugin</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4495"> [6/38]: configuring replication version plugin</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4496"> [7/38]: enabling IPA enrollment plugin</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4497"> [8/38]: enabling ldapi</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4498"> [9/38]: configuring uniqueness plugin</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4499"> [10/38]: configuring uuid plugin</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4500"> [11/38]: configuring modrdn plugin</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4501"> [12/38]: configuring DNS plugin</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4502"> [13/38]: enabling entryUSN plugin</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4503"> [14/38]: configuring lockout plugin</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4504"> [15/38]: creating indices</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4505"> [16/38]: enabling referential integrity plugin</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4506"> [17/38]: configuring ssl for ds instance</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4507"> [18/38]: configuring certmap.conf</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4508"> [19/38]: configure autobind for root</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4509"> [20/38]: configure new location for managed entries</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4510"> [21/38]: configure dirsrv ccache</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4511"> [22/38]: enable SASL mapping fallback</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4512"> [23/38]: restarting directory server</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4513"> [24/38]: setting up initial replication</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4514">Starting replication, please wait until this has completed.</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4515"><br id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4516"></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4517">[ipa1.nrln.us] reports: Update failed! Status: [-1 - LDAP error: Can't contact LDAP server]</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4518"><br id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4519"></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4520"> [error] RuntimeError: Failed to start replication</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4521">Your system may be partly configured.</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4522">Run /usr/sbin/ipa-server-install --uninstall to clean up.</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4523"><br id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4524"></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4525">ipa.ipapython.install.cli.install_tool(Replica): ERROR Failed to start replication</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4526"><br id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4527"></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4526"><br></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4526">The error message is misleading. The two hosts sit on the same subnet. All firewalls are off. Selinux is disabled. Here is an nmap port scan from the replica to the master:</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4526"><br></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4526"><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4624"><br id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4625"></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4626">[root@ipa2 ~]# nmap ipa1</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4627"><br id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4628"></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4629">Starting Nmap 6.40 ( http://nmap.org ) at 2016-04-07 00:12 EDT</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4630">Nmap scan report for ipa1 (192.168.1.38)</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4631">Host is up (0.000086s latency).</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4632">rDNS record for 192.168.1.38: ipa1.nrln.us</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4633">Not shown: 990 closed ports</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4634">PORT STATE SERVICE</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4635">22/tcp open ssh</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4636">80/tcp open http</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4637">88/tcp open kerberos-sec</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4638">389/tcp open ldap</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4639">443/tcp open https</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4640">464/tcp open kpasswd5</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4641">636/tcp open ldapssl</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4642">749/tcp open kerberos-adm</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4643">8080/tcp open http-proxy</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4644">8443/tcp open https-alt</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4645">MAC Address: 52:54:00:33:34:F0 (QEMU Virtual NIC)</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4646"><br id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4647"></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4648">Nmap done: 1 IP address (1 host up) scanned in 0.14 seconds</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4649">[root@ipa2 ~]#</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4650"><br id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4651"></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4650"><br></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4650">Why do I get this message?</div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4650"><br></div><div dir="ltr" id="yiv1029346875yui_3_16_0_ym19_1_1460001886615_4650">TIA!!</div></div></div></div><br><br></div> </div> </div> </div></div></body></html>