LHEUREUX Bernard wrote: > Hi Rob, > > After updates of the FreeIPA servers, we are now running on version > ipa-server-4.12.2-14.el9_6.1.x86_64 which is the latest one...
Ok. I've never seen them get out-of-sync before. I'll try to engage with the PKI folks but it's vacation season so it might take a bit. rob > -----Original Message----- > From: LHEUREUX Bernard via FreeIPA-users > <[email protected]> > Sent: lundi 28 juillet 2025 07:40 > To: Rob Crittenden <[email protected]>; FreeIPA users list > <[email protected]> > Cc: LHEUREUX Bernard <[email protected]> > Subject: [Freeipa-users] Re: Strange behaviour with CA > > Hi Rob, sorry for the late answer, I'm back from holiday break today... > > My version of IPA is 4.12.2-14.el9 running on Red Hat Enterprise Linux > release 9.6 > > -----Original Message----- > From: Rob Crittenden <[email protected]> > Sent: mardi 8 juillet 2025 17:07 > To: FreeIPA users list <[email protected]> > Cc: LHEUREUX Bernard <[email protected]> > Subject: Re: [Freeipa-users] Strange behaviour with CA > > LHEUREUX Bernard via FreeIPA-users wrote: >> Hi all, >> >> >> >> I remarked a strage thing in our FreeIPA infrastructure containing 3 >> servers/replicas… >> >> When I type “pki securitydomain-show” >> >> >> >> The KRA part shows correctly the 3 servers, but the CA part shows only >> 2 of the 3 servers but when I check CA is installed on the 3 servers… >> >> >> >> [root@ipa01 ~]# pki securitydomain-show >> >> Domain: IPA >> >> >> >> CA Subsystem: >> >> >> >> Host ID: CA ipa03.mydomain.infra 443 >> >> Hostname: ipa03.mydomain.infra >> >> Port: 80 >> >> Secure Port: 443 >> >> Domain Manager: TRUE >> >> >> >> Host ID: CA ipa01.mydomain.infra 443 >> >> Hostname: ipa01.mydomain.infra >> >> Port: 80 >> >> Secure Port: 443 >> >> Domain Manager: TRUE >> >> >> >> KRA Subsystem: >> >> >> >> Host ID: KRA ipa03.mydomain.infra 443 >> >> Hostname: ipa03.mydomain.infra >> >> Port: 80 >> >> Secure Port: 443 >> >> Domain Manager: FALSE >> >> >> >> Host ID: KRA ipa02.mydomain.infra 443 >> >> Hostname: ipa02.mydomain.infra >> >> Port: 80 >> >> Secure Port: 443 >> >> Domain Manager: FALSE >> >> >> >> Host ID: KRA ipa01.mydomain.infra 443 >> >> Hostname: ipa01.mydomain.infra >> >> Port: 80 >> >> Secure Port: 443 >> >> Domain Manager: FALSE >> >> >> >> [root@ipa01 ~]# ipa server-role-show ipa02.mydomain.infra "ca server" >> >> Server name: ipa02.mydomain.infra >> >> Role name: CA server >> >> Role status: enabled >> >> >> >> >> How could I correct that ? > > What release of IPA and what distribution are you runnning? > > rob > > > > ________________________________ > 1/Conformément à notre certification ISO 27001, ce message et toute pièce > jointe sont la propriété exclusive de Win. L’information contenue dans cet e- > mail peut s’avérer confidentielle et dès lors protégée de toute divulgation. > Si vous avez reçu cette communication par erreur, veuillez nous en informer > immédiatement en répondant à ce message et en le supprimant de votre > ordinateur, sans le copier ni le divulguer. > 2/L’acceptation de toute offre commerciale (quel qu’en soit le support) > emporte l’adhésion aux descriptifs (notamment techniques) inhérents aux > solutions offertes, ainsi qu’aux conditions commerciales générales de Win, > consultables via https://www.win.be/cgv DISCLAIMER : > https://www.win.be/fr-win/disclaimer.htm > -- > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue > -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
