Hi all,
So I was searching around, still trying to find an answer, but sadly it
seems to never have been solved. I found a repeat of the exact same
error I have been seeing, and because of it, unable to add any new
replicas --
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
If you look at that, it was 2017. No one ever responded with any help. I
posted the exact same problem this year and nada as well. I love IPA,
but am stuck with being able to expand the usage. Sure I have a RedHat
support contract, but even response there has been non-existent to solve
this problem, is anyone able to provide any help or am I stuck and need
to move away from RHEL and IPA? :-(
Done configuring the web interface (httpd).
Configuring ipa-otpd
[1/2]: starting ipa-otpd
[2/2]: configuring ipa-otpd to start on boot
Done configuring ipa-otpd.
Configuring ipa-custodia
[1/4]: Generating ipa-custodia config file
[2/4]: Generating ipa-custodia keys
[3/4]: starting ipa-custodia
[4/4]: configuring ipa-custodia to start on boot
Done configuring ipa-custodia.
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.
*ipapython.admintool: ERROR 406 Client Error: Failed to validate
message: No recipient matched the provided key["Failed:
[ValueError('Decryption failed.',)]"]*
ipapython.admintool: ERROR The ipa-replica-install command failed.
See /var/log/ipareplica-install.log for more information
See if you have /usr/libexec/ipa/ipa-custodia-check. If you do run it.
If not you can get a it from