LHEUREUX Bernard via FreeIPA-users wrote: > Hi all, > > > > I remarked a strage thing in our FreeIPA infrastructure containing 3 > servers/replicas > > When I type pki securitydomain-show > > > > The KRA part shows correctly the 3 servers, but the CA part shows only 2 > of the 3 servers but when I check CA is installed on the 3 servers > > > > [root@ipa01 ~]# pki securitydomain-show > > Domain: IPA > > > > CA Subsystem: > > > > Host ID: CA ipa03.mydomain.infra 443 > > Hostname: ipa03.mydomain.infra > > Port: 80 > > Secure Port: 443 > > Domain Manager: TRUE > > > > Host ID: CA ipa01.mydomain.infra 443 > > Hostname: ipa01.mydomain.infra > > Port: 80 > > Secure Port: 443 > > Domain Manager: TRUE > > > > KRA Subsystem: > > > > Host ID: KRA ipa03.mydomain.infra 443 > > Hostname: ipa03.mydomain.infra > > Port: 80 > > Secure Port: 443 > > Domain Manager: FALSE > > > > Host ID: KRA ipa02.mydomain.infra 443 > > Hostname: ipa02.mydomain.infra > > Port: 80 > > Secure Port: 443 > > Domain Manager: FALSE > > > > Host ID: KRA ipa01.mydomain.infra 443 > > Hostname: ipa01.mydomain.infra > > Port: 80 > > Secure Port: 443 > > Domain Manager: FALSE > > > > [root@ipa01 ~]# ipa server-role-show ipa02.mydomain.infra "ca server" > > Server name: ipa02.mydomain.infra > > Role name: CA server > > Role status: enabled > > > > > How could I correct that ?
What release of IPA and what distribution are you runnning? rob -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
