Issue:
I'm deploying FreeIPA replica on azure VM,using Rocky 9.3 on both Master and client(replica) VM, and borh version of FreeIPA is 4.11.0. This two vm is in the same virtual network
master and client deployment is fine, but when installing replica on client vm, it always get error:
[1/3]: configuring TLS for DS instance
[error] RuntimeError: Certificate issuance failed (CA_UNREACHABLE)
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.
ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR Certificate issuance failed (CA_UNREACHABLE)
ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information
i've already check firewall and access right of the ca file on master.
it have spend two days on this, really need some help!!