I'm moving the thread to freeipa-users mailing list as it's a better place for this conversation.

The chapter Adjusting IdM clients during recovery of IdM guide Performing disaster recovery with Identity Management explains the required steps when a server is removed from the topology.
You may also need to update the configuration of your applications if they hard-coded the server name.

If the first master was the CA renewal master / CRL generation master, you also need to move these functions to the replica, using the steps from Assigning the CA renewal server role to the RHEL 8 IdM server and Starting CRL generation on the new RHEL 8 IdM CA server.


On Sat, May 15, 2021 at 6:43 PM Anubhav Gupta via FreeIPA-devel <freeipa-devel@lists.fedorahosted.org> wrote:
I have replicated multi-master environment of freeIPA server. Suppose I have follwoing master server of freeIPA-

First Master - ipa-server.xyz.com

Replicated master - ipa-replica.xyz.com

My all application like Jenkins, GitLab etc use ipa-server.xyz.com to authenticate. Now I lost my first master server. How can i use my replicated master server in place of first one ?
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure