I had to replace the IPA-server due to loss of CA

Original setup was that all clients were connected to a replica-server v3.0 on 
centos 6 that hosted the domain and realm OURDOMAIN.EXAMPLE

I configured a new IPA-master v4.6.4 on centos 7 with the same domain,realm, 
and id-range and reconnected all clients to the new master.
I used ipa-client-install --uninstall , cleared /var/lib/sss/db/*, and ran 
ipa-client-install

All clients now login from the new ipa-master. All woks fine as long as I leave 
the old replica-server online. As soon as I turn it off, my clients start to 
suffer problems after a couple of hours or next day that
cause several applications to stall when opening. Eg Firefox browser will not 
start any more. DNS is online and resolves requests
When I then start the old replica again all function restore almost immediately 
as it comes online.

Does someone has any idea what could be happening ?

 
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org

Reply via email to