On Wed, Mar 6, 2019 at 5:35 PM Rob van Halteren via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote: > > I had to replace the IPA-server due to loss of CA > > Original setup was that all clients were connected to a replica-server v3.0 > on centos 6 that hosted the domain and realm OURDOMAIN.EXAMPLE > > I configured a new IPA-master v4.6.4 on centos 7 with the same domain,realm, > and id-range and reconnected all clients to the new master. > I used ipa-client-install --uninstall , cleared /var/lib/sss/db/*, and ran > ipa-client-install > > All clients now login from the new ipa-master. All woks fine as long as I > leave the old replica-server online. As soon as I turn it off, my clients > start to suffer problems after a couple of hours or next day that > cause several applications to stall when opening. Eg Firefox browser will not > start any more. DNS is online and resolves requests
What does the following say: dig SRV _ldap._tcp.ipa_domain when both old and new instances are online? > When I then start the old replica again all function restore almost > immediately as it comes online. Is /home an NFS share mounted on these clients? > Does someone has any idea what could be happening ? > > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
