Sorry for self-replying.
I should have mentioned that we already went through:
http://www.freeipa.org/page/Troubleshooting#Service_does_not_start
But it turned out that a simple
ipactl stop
ipactl start
helped.
Surprisingly, the service does not start correctly at boot time, but
starting it
Dear all,
we run a pair of IPA servers:
a master running on FC 21 and a slave running on CentOS release 7.2.1511.
krb5kdc: Server error - while fetching master key K/M for realm
PLEIADES.UNI-WUPPERTAL.DE
To handle CVE-2015-7547, we upgraded both systems (with a simple "yum
update"). The master