On 05/22/2018 05:32 PM, Michael Rainey (Contractor, Code 7320) via FreeIPA-users wrote: > The mystery continues. It seems might be working but in reality it's > not. The replica has stopped updating from the master and is unable > to talk to the LDAP server. I'm fairly certain this is a certificate > issue. However, my certs appear to be valid. > > So far, the ipa-replica-manage command using the re-initialize or > force-sync is not fixing the problem. Copying the LDAP database from > the master to the replica has not worked. Where do I go from here? >> # ipa-replica-manage list tierod.<domain-name> -v >> fitch.<domain-name>: replica >> last init status: None >> last init ended: 1970-01-01 00:00:00+00:00 >> last update status: Error (0) Replica acquired successfully: >> Incremental update succeeded >> last update ended: 2018-05-22 21:19:06+00:00 >> sump.<domain-name>: replica The directory server access log on (sump) should confirm your theory....
But of course I have to ask, is sump actually running? >> last init status: -1 - LDAP error: Can't contact LDAP server >> last init ended: 1970-01-01 00:00:00+00:00 >> last update status: Error (-1) Problem connecting to replica - LDAP >> error: Can't contact LDAP server (connection error) >> last update ended: 1970-01-01 00:00:00+00:00 > > >> # ipa-replica-manage list sump.<domain-name> -v >> Directory Manager password: >> >> tierod.<domain-name>: replica >> last init status: None >> last init ended: 1970-01-01 00:00:00+00:00 >> last update status: Error (0) Replica acquired successfully: >> Incremental update succeeded >> last update ended: 2018-05-22 21:09:22+00:00 > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to > freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/FYJVSCJVEWU46GDMEBNAZCZCH3UBYBTW/ _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/VSED3CZFBGVYMIPJ3ASJDFTUGJCAXMNF/