Hi, On Wed, Jun 25, 2025 at 9:11 AM Daniel Ruiz via FreeIPA-users < [email protected]> wrote:
> Hello, > > I want to configure a "replica server". I need that because in my > scenario, main FreeIPA server is for some clients that are on the same net > but I have an small HPC cluster where server is on the same public net but > all compute nodes are running with private IP, so that clients connect to > the HPC server to get users and $HOMEs. My idea is configure HPC server as > "replica" to get all users from the main server and, then, all HPC clients > could connect with the same users. > > I have done these steps: > 1. Install FreeIPA server on main server (OK!) > 2. Configure all public clients as FreeIPA clients from server in point 1. > (OK!) > 3. Configure HPC server as client from domain that main servers is serving > in point 1 (OK!) > 4. Promote HPC server as FreeIPA replica server --> NO, ERROR! > > After running "ipa-replica-install", error is: > "Your system may be partly configured. > Run /usr/sbin/ipa-server-install --uninstall to clean up". > > Cannot promote this client to a replica. Local domain 'MYDOMAIN' does not > match IPA domain "machine.domain". > The ipa-replica-innstall command failed." > Can you provide the exact command line that you used for ipa-server-install, for ipa-client-install and for ipa-replica-install? The version of ipa-server is also relevant. Thanks, flo > > Yes, "MYDOMAIN" is the FreeIPA domain (get from my old YPSERV system). > That domain is different from the machine domain name because I domain name > is for whole organitzation and I think is better not to take that, so I > have configured a different FreeIPA domain name. > > During configuration as FreeIPA server, system didn't return any problem > about machine domain name and FreeIPA domain name. I assigned "realm name" > as MYDOMAIN and all process ended correctly. > > However, HPC server can't promote to replica. > > What am I doing wrong? > > Thanks. > -- > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue >
-- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
