So there are two possibilities here. One, "cn=Replication
Manager
cloneAgreement1-fitch.<domain>-pki-tomcat,ou=csusers,cn=config" does
not exist on the server, or two, you are using the wrong password for
this entry in the replication agreement.
Perhaps the password has been corrupted. The agreements appear to be
there when I run the command listed below. These systems have been
running well for the past few years before this problem started
appearing. I have run the "ipa-replica-manage re-initialize" command,
but the pki-tomcatd service still continues to fail when trying to start
the service. Are there any additional steps you recommend?
[root@fitch ~]# ipa-replica-manage list fitch.<domain>
Directory Manager password:
kodiak.<domain>: replica
piston.<domain>: replica
tierod.<domain>: replica
*Michael Rainey*
Network Representative
Naval Research Laboratory, Code 7320
Building 1009, Room C156
Stennis Space Center, MS 39529
On 05/09/2018 05:01 PM, Mark Reynolds via FreeIPA-users wrote:
So there are two possibilities here. One, "cn=Replication
Manager
cloneAgreement1-fitch.<domain>-pki-tomcat,ou=csusers,cn=config" does
not exist on the server, or two, you are using the wrong password for
this entry in the replication agreement.