On 2/19/19 12:29 PM, Peter Zoltan Keresztes via FreeIPA-users wrote:
After setting the $BASEDN I am getting the following:
dn:
cn=ipa-ldap-delegation-targets,cn=s4u2proxy,cn=etc,dc=redcapcloud,dc=local
memberPrincipal: ldap/vmfripa-1c.redcapcloud.local(a)REDCAPCLOUD.LOCAL
<mailto:ldap/vmfripa-1c.redcapcloud.local@REDCAPCLOUD.LOCAL>
memberPrincipal: ldap/vmcaipa-1c.redcapcloud.local(a)REDCAPCLOUD.LOCAL
<mailto:ldap/vmcaipa-1c.redcapcloud.local@REDCAPCLOUD.LOCAL>
cn: ipa-ldap-delegation-targets
objectClass: groupOfPrincipals
objectClass: top
Ok, so the entry exists on the master. Did you also check
cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$BASEDN and the access log on
the replica as I explained in a previous mail [1]?
Thanks,
flo
[1]
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
> On 19 Feb 2019, at 12:25, Florence Blanc-Renaud
<flo(a)redhat.com
> <mailto:flo@redhat.com>> wrote:
>
> /etc/ipa/default.conf
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...