Hello,

I want to configure a "replica server". I need that because in my scenario, 
main FreeIPA server is for some clients that are on the same net but I have an 
small HPC cluster where server is on the same public net but all compute nodes 
are running with private IP, so that clients connect to the HPC server to get 
users and $HOMEs. My idea is configure HPC server as "replica" to get all users 
from the main server and, then, all HPC clients could connect with the same 
users.

I have done these steps:
1. Install FreeIPA server on main server (OK!)
2. Configure all public clients as FreeIPA clients from server in point 1. (OK!)
3. Configure HPC server as client from domain that main servers is serving in 
point 1 (OK!)
4. Promote HPC server as FreeIPA replica server --> NO, ERROR!

After running "ipa-replica-install", error is:
"Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up".

Cannot promote this client to a replica. Local domain 'MYDOMAIN' does not match 
IPA domain "machine.domain".
The ipa-replica-innstall command failed."

Yes, "MYDOMAIN" is the FreeIPA domain (get from my old YPSERV system). That 
domain is different from the machine domain name because I domain name is for 
whole organitzation and I think is better not to take that, so I have 
configured a different FreeIPA domain name. 

During configuration as FreeIPA server, system didn't return any problem about 
machine domain name and FreeIPA domain name. I assigned "realm name" as 
MYDOMAIN and all process ended correctly.

However, HPC server can't promote to replica.

What am I doing wrong?

Thanks.
-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to