I had to replace the IPA-server due to loss of CA
Original setup was that all clients were connected to a replica-server v3.0 on centos 6
that hosted the domain and realm OURDOMAIN.EXAMPLE
I configured a new IPA-master v4.6.4 on centos 7 with the same domain,realm, and id-range
and reconnected all clients to the new master.
I used ipa-client-install --uninstall , cleared /var/lib/sss/db/*, and ran
ipa-client-install
All clients now login from the new ipa-master. All woks fine as long as I leave the old
replica-server online. As soon as I turn it off, my clients start to suffer problems after
a couple of hours or next day that
cause several applications to stall when opening. Eg Firefox browser will not start any
more. DNS is online and resolves requests
When I then start the old replica again all function restore almost immediately as it
comes online.
Does someone has any idea what could be happening ?