I had to replace the IPA-server due to loss of CA Original setup was that all clients were connected to a replica-server v3.0 on centos 6 that hosted the domain and realm OURDOMAIN.EXAMPLE
I configured a new IPA-master v4.6.4 on centos 7 with the same domain,realm, and id-range and reconnected all clients to the new master. I used ipa-client-install --uninstall , cleared /var/lib/sss/db/*, and ran ipa-client-install All clients now login from the new ipa-master. All woks fine as long as I leave the old replica-server online. As soon as I turn it off, my clients start to suffer problems after a couple of hours or next day that cause several applications to stall when opening. Eg Firefox browser will not start any more. DNS is online and resolves requests When I then start the old replica again all function restore almost immediately as it comes online. Does someone has any idea what could be happening ? _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org