[Freeipa-users] Re: healthcheck complains about a removed replica

Rob Crittenden via FreeIPA-users wrote: > Kees Bakker via FreeIPA-users wrote: >> On 13-07-2021 19:47, Kees Bakker via FreeIPA-users wrote: >>> *** EXTERNAL E-MAIL *** >>> >>> >>> On 13-07-2021 17:24, Kees Bakker via FreeIPA-users wrote: On 13-07-2021 17:08, Rob Crittenden wrote: > Kees Ba

[Freeipa-users] Re: healthcheck complains about a removed replica

Kees Bakker via FreeIPA-users wrote: > On 13-07-2021 19:47, Kees Bakker via FreeIPA-users wrote: >> *** EXTERNAL E-MAIL *** >> >> >> On 13-07-2021 17:24, Kees Bakker via FreeIPA-users wrote: >>> On 13-07-2021 17:08, Rob Crittenden wrote: Kees Bakker wrote: > On 12-07-2021 21:51, Rob Critte

[Freeipa-users] Re: healthcheck complains about a removed replica

On 13-07-2021 19:47, Kees Bakker via FreeIPA-users wrote: *** EXTERNAL E-MAIL *** On 13-07-2021 17:24, Kees Bakker via FreeIPA-users wrote: On 13-07-2021 17:08, Rob Crittenden wrote: Kees Bakker wrote: On 12-07-2021 21:51, Rob Crittenden wrote: Kees Bakker via FreeIPA-users wrote: Hi Flo,

[Freeipa-users] Re: healthcheck complains about a removed replica

On 13-07-2021 17:24, Kees Bakker via FreeIPA-users wrote: On 13-07-2021 17:08, Rob Crittenden wrote: Kees Bakker wrote: On 12-07-2021 21:51, Rob Crittenden wrote: Kees Bakker via FreeIPA-users wrote: Hi Flo, Do you have a hint how I can get to the point where I can execute the pki securitydo

[Freeipa-users] Re: healthcheck complains about a removed replica

On 13-07-2021 17:08, Rob Crittenden wrote: Kees Bakker wrote: On 12-07-2021 21:51, Rob Crittenden wrote: Kees Bakker via FreeIPA-users wrote: Hi Flo, Do you have a hint how I can get to the point where I can execute the pki securitydomain-host-del command? All examples [2] on the Internet are

[Freeipa-users] Re: healthcheck complains about a removed replica

Kees Bakker wrote: > On 12-07-2021 21:51, Rob Crittenden wrote: >> Kees Bakker via FreeIPA-users wrote: >>> Hi Flo, >>> >>> Do you have a hint how I can get to the point where I can execute >>> the pki securitydomain-host-del command? All examples [2] on the >>> Internet >>> are from the time when

[Freeipa-users] Re: healthcheck complains about a removed replica

On 12-07-2021 21:51, Rob Crittenden wrote: Kees Bakker via FreeIPA-users wrote: Hi Flo, Do you have a hint how I can get to the point where I can execute the pki securitydomain-host-del command? All examples [2] on the Internet are from the time when there was a /root/ca-agent.p12 and ipaCert.

[Freeipa-users] Re: healthcheck complains about a removed replica

Kees Bakker via FreeIPA-users wrote: > Hi Flo, > > Do you have a hint how I can get to the point where I can execute > the pki securitydomain-host-del command? All examples [2] on the Internet > are from the time when there was a /root/ca-agent.p12 and ipaCert. > I think that has been migrated to

[Freeipa-users] Re: healthcheck complains about a removed replica

Hi Flo, Do you have a hint how I can get to the point where I can execute the pki securitydomain-host-del command? All examples [2] on the Internet are from the time when there was a /root/ca-agent.p12 and ipaCert. I think that has been migrated to /var/lib/ipa/ra-agent.{key,pem} [1]. Maybe you

[Freeipa-users] Re: healthcheck complains about a removed replica

It is now time for me to try and follow the suggested pki commands. However, I don't have a /root/ca-agent.p12 There is quite a bit of documentation on the Internet, but it might not all be up-to-date. Here [1] the file /root/ca-agent.p12 is mentioned under "PKI Admin Certificate". "PKI admin c

[Freeipa-users] Re: healthcheck complains about a removed replica

> On 29-05-2021 10:21, Alexander Bokovoy wrote: > > But I did use "ipa-csreplica-manage del" as well. However, I remember that it > complained it couldn't remove that host. I was assuming it was already gone. > When I list with ipa-csreplica-manage then I don't see the old hosts anymore. Its wort

[Freeipa-users] Re: healthcheck complains about a removed replica

Florence Renaud wrote: > Hi, > I'm not sure the issue is really on PKI side. On ipa server-del call, > IPA should also make sure to call something similar to > pki securitydomain-host-del to make sure that the host is removed from > PKI security domain. > > This was tracked in BZ 1740702 >

[Freeipa-users] Re: healthcheck complains about a removed replica

Hi, I'm not sure the issue is really on PKI side. On ipa server-del call, IPA should also make sure to call something similar to pki securitydomain-host-del to make sure that the host is removed from PKI security domain. This was tracked in BZ 1740702

[Freeipa-users] Re: healthcheck complains about a removed replica

On 01-06-2021 18:01, Rob Crittenden wrote: Kees Bakker via FreeIPA-users wrote: On 29-05-2021 10:21, Alexander Bokovoy wrote: On pe, 28 touko 2021, Kees Bakker via FreeIPA-users wrote: On 28-05-2021 19:32, Kees Bakker via FreeIPA-users wrote: On 28-05-2021 17:22, Kees Bakker via FreeIPA-users

[Freeipa-users] Re: healthcheck complains about a removed replica

Kees Bakker via FreeIPA-users wrote: > On 29-05-2021 10:21, Alexander Bokovoy wrote: >> On pe, 28 touko 2021, Kees Bakker via FreeIPA-users wrote: >>> On 28-05-2021 19:32, Kees Bakker via FreeIPA-users wrote: On 28-05-2021 17:22, Kees Bakker via FreeIPA-users wrote: > Hi, > > After

[Freeipa-users] Re: healthcheck complains about a removed replica

On 29-05-2021 10:21, Alexander Bokovoy wrote: On pe, 28 touko 2021, Kees Bakker via FreeIPA-users wrote: On 28-05-2021 19:32, Kees Bakker via FreeIPA-users wrote: On 28-05-2021 17:22, Kees Bakker via FreeIPA-users wrote: Hi, After installing a new replica and running /usr/bin/ipa-healthcheck

[Freeipa-users] Re: healthcheck complains about a removed replica

On pe, 28 touko 2021, Kees Bakker via FreeIPA-users wrote: On 28-05-2021 19:32, Kees Bakker via FreeIPA-users wrote: *** EXTERNAL E-MAIL *** On 28-05-2021 17:22, Kees Bakker via FreeIPA-users wrote: Hi, After installing a new replica and running /usr/bin/ipa-healthcheck --source pki.server

[Freeipa-users] Re: healthcheck complains about a removed replica

On 28-05-2021 19:32, Kees Bakker via FreeIPA-users wrote: *** EXTERNAL E-MAIL *** On 28-05-2021 17:22, Kees Bakker via FreeIPA-users wrote: Hi, After installing a new replica and running /usr/bin/ipa-healthcheck --source pki.server.healthcheck.clones.connectivity_and_data I'm getting this

[Freeipa-users] Re: healthcheck complains about a removed replica

On 28-05-2021 17:22, Kees Bakker via FreeIPA-users wrote: Hi, After installing a new replica and running /usr/bin/ipa-healthcheck --source pki.server.healthcheck.clones.connectivity_and_data I'm getting this error keyctl_search: Required key not available Enter password for Internal Key Stor