[Freeipa-users] Re: ipa-healthcheck Error - how to remove an old replica in pki DB ?

Thanks, Rob. ipa-replica-install does not take --server switch. I used --server in ipa-client-install, which puts the server in /etc/ipa/default.conf, when promoting this client to replica with ipa-replica-install, it picks up the server there. At least, this is my understanding. Below are the com

[Freeipa-users] Re: ipa-healthcheck Error - how to remove an old replica in pki DB ?

Florence Blanc-Renaud wrote: > > > On Wed, Jul 13, 2022 at 12:46 AM Kathy Zhu via FreeIPA-users > > wrote: > > Hi Rob, > > On a different topic, we started migration from Centos 7 to Red Hat 8.6 > over the weekend, after adding the first Re

[Freeipa-users] Re: ipa-healthcheck Error - how to remove an old replica in pki DB ?

Hi Florence, Thank you for lending help! Please see below ipareplica-conncheck.log. Thanks. Kathy. [root@rh-master2 /]# cat /var/log/ipareplica-conncheck.log 2022-07-12T21:34:41Z DEBUG /usr/sbin/ipa-replica-conncheck was invoked with options: {'master': 'rh-master1.example.com', 'auto_master_

[Freeipa-users] Re: ipa-healthcheck errors...

> > On Friday, July 8th, 2022 at 1:02 PM, Rob Crittenden rcrit...@redhat.com > > wrote: > > > > > Not sure what you mean by "wire traffic". It's a vault so perhaps you > > > stored some keys there. IPA already encrypts all its own internal traffic. > > > > When I first installed FreeIPA it di

[Freeipa-users] Re: ipa-healthcheck Error - how to remove an old replica in pki DB ?

On Wed, Jul 13, 2022 at 12:46 AM Kathy Zhu via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > Hi Rob, > > On a different topic, we started migration from Centos 7 to Red Hat 8.6 over > the weekend, after adding the first Red Hat master and moved CA renewal and > CRL generation ro