So today I come in to work and find that one of my FreeIPA servers isn't synching with the rest of the cluster. I have a policy set to to go in a big square. I tried doing a ipa-replica-manage force-sync --verbose and then tried doing a re-initialize. I have the networks wide open to allow communication to all the servers. When I telnet to port 636 from a remote system it works fine. I have applications that are using ldaps so I know its working. Any reason I would not be able to communicate over ldaps?
[root@freeipa04 ~]# ipa-replica-manage force-sync --from freeipa03.east.gatewayblend.net --verbose
Traceback (most recent call last):
File "/sbin/ipa-replica-manage", line 1615, in <module>
main(options, args)
File "/sbin/ipa-replica-manage", line 1564, in main
options.nolookup)
File "/sbin/ipa-replica-manage", line 1234, in force_sync
repl = replication.ReplicationManager(realm, fromhost, dirman_passwd)
File "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py", line 222, in __init__
self.conn.gssapi_bind()
File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1124, in gssapi_bind
'', auth_tokens, server_controls, client_controls)
File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
self.gen.throw(type, value, traceback)
File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1005, in error_handler
error=info)
NetworkError: cannot connect to 'ldaps://freeipa03.east.gatewayblend.net:636':
Unexpected error: cannot connect to 'ldaps://freeipa03.east.gatewayblend.net:636':
[root@freeipa04 ~]#
[root@freeipa04 ~]# ipa-replica-manage re-initialize --from freeipa03.east.gatewayblend.net --verbose
Traceback (most recent call last):
File "/sbin/ipa-replica-manage", line 1615, in <module>
main(options, args)
File "/sbin/ipa-replica-manage", line 1558, in main
options.nolookup)
File "/sbin/ipa-replica-manage", line 1200, in re_initialize
repl = replication.ReplicationManager(realm, fromhost, dirman_passwd)
File "/usr/lib/python2.7/site-packages/ipaserver/install/replication.py", line 222, in __init__
self.conn.gssapi_bind()
File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1124, in gssapi_bind
'', auth_tokens, server_controls, client_controls)
File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
self.gen.throw(type, value, traceback)
File "/usr/lib/python2.7/site-packages/ipapython/ipaldap.py", line 1005, in error_handler
error=info)
NetworkError: cannot connect to 'ldaps://freeipa03.east.gatewayblend.net:636':
Unexpected error: cannot connect to 'ldaps://freeipa03.east.gatewayblend.net:636':
[root@freeipa04 ~]#
[root@freeipa04 ~]# ipa-replica-manage re-initialize --from freeipa03.stl1.gatewayblend.net --verbose
ipa: INFO: Setting agreement cn=freeipa03.stl1.gatewayblend.net-to-freeipa04.east.gatewayblend.net,cn=replica,cn=dc\=gatewayblend\,dc\=net,cn=mapping tree,cn=config schedule to 2358-2359 0 to force synch
ipa: INFO: Deleting schedule 2358-2359 0 from agreement cn=freeipa03.stl1.gatewayblend.net-to-freeipa04.east.gatewayblend.net,cn=replica,cn=dc\=gatewayblend\,dc\=net,cn=mapping tree,cn=config
Update in progress, 14 seconds elapsed
[ldaps://freeipa03.stl1.gatewayblend.net:636] reports: Update failed! Status: [-1 - LDAP error: Can't contact LDAP server]
[root@freeipa04 ~]#