Hello,

 

I’m currently running into an issue when trying to do the ipa-replica-install.

I did the ipa-replica-prepare command and copied the replica gpg file to the new replica server and run the following command to do the install

 

Ipa-replica-install –setup-ca –setup-dns –no-forwarders /var/lib/ipa/replica-info-server.domain.ca.gpg

 

I get the following error part way through the process;

 

DatabaseError: Server is unwilling to perform: modification of attribute nsds5replicaleasetimeout is not allowed in replica entry

 

I looked at the log and saw the following’

 

DEBUG The ipa-replica-install command failed, exception: DatabaseError: Server is unwilling to perform: Modification of attribute nsds5replicaleasetimeout is not allowed in replica entry

ERROR Server is unwilling to perform: modification of attribute nsds5replicaleasetimeout is not allowed in replica entry

 

I did a search and could not find the nsds5replicaleasetimeoute entry in LDAP.

Is this something I can add myself? Or is there something else that needs to be done? I don’t see much information on this error when searching.

 

I had a replica before and removed it so I’m not quite sure what is going on with this.

The only difference I can see between the 2 replica’s is this new one is running a slightly newer version of RHEL, IPA and 389.

 

Master Server information:

RHEL 7.1

IPA version 4.1.0-18

389-ds 1.3.3.1-13

 

Replica Server Information:

RHEL 7.7

IPA Version 4.6.5-11

389-ds 1.3.9.1-18

 

Thanks,

 

Matt