So today I come in to work and find that one of my FreeIPA servers isn't synching with the rest of the cluster. I have a policy set to to go in a big square. I tried doing a ipa-replica-manage force-sync --verbose and then tried doing a re-initialize. I have the networks wide open to allow communication to all the servers. When I telnet to port 636 from a remote system it works fine. I have applications that are using ldaps so I know its working. Any reason I would not be able to communicate over ldaps?
[root@freeipa04 ~]# ipa-replica-manage force-sync --from freeipa03.east.gatewayblend.net --verboseTraceback (most recent call last): File "/sbin/ipa-replica-manage", line 1615, in <module> main(options, args) File "/sbin/ipa-replica-manage", line 1564, in main options.nolookup) File "/sbin/ipa-replica-manage", line 1234, in force_sync repl = replication.ReplicationManager(realm, fromhost, dirman_passwd) File "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py", line 222, in __init__ self.conn.gssapi_bind() File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1124, in gssapi_bind '', auth_tokens, server_controls, client_controls) File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__ self.gen.throw(type, value, traceback) File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1005, in error_handler error=info)NetworkError: cannot connect to 'ldaps://freeipa03.east.gatewayblend.net:636':Unexpected error: cannot connect to 'ldaps://freeipa03.east.gatewayblend.net:636':[root@freeipa04 ~]# [root@freeipa04 ~]# ipa-replica-manage re-initialize --from freeipa03.east.gatewayblend.net --verboseTraceback (most recent call last): File "/sbin/ipa-replica-manage", line 1615, in <module> main(options, args) File "/sbin/ipa-replica-manage", line 1558, in main options.nolookup) File "/sbin/ipa-replica-manage", line 1200, in re_initialize repl = replication.ReplicationManager(realm, fromhost, dirman_passwd) File "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py", line 222, in __init__ self.conn.gssapi_bind() File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1124, in gssapi_bind '', auth_tokens, server_controls, client_controls) File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__ self.gen.throw(type, value, traceback) File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1005, in error_handler error=info)NetworkError: cannot connect to 'ldaps://freeipa03.east.gatewayblend.net:636':Unexpected error: cannot connect to 'ldaps://freeipa03.east.gatewayblend.net:636':[root@freeipa04 ~]# [root@freeipa04 ~]# ipa-replica-manage re-initialize --from freeipa03.stl1.gatewayblend.net --verboseipa: INFO: Setting agreement cn=freeipa03.stl1.gatewayblend.net-to-freeipa04.east.gatewayblend.net,cn=replica,cn=dc=gatewayblend,dc=net,cn=mapping tree,cn=config schedule to 2358-2359 0 to force synchipa: INFO: Deleting schedule 2358-2359 0 from agreement cn=freeipa03.stl1.gatewayblend.net-to-freeipa04.east.gatewayblend.net,cn=replica,cn=dc=gatewayblend,dc=net,cn=mapping tree,cn=configUpdate in progress, 14 seconds elapsed[ldaps://freeipa03.stl1.gatewayblend.net:636] reports: Update failed! Status: [-1 - LDAP error: Can't contact LDAP server] [root@freeipa04 ~]#