Hi Flo (and other helpful people on this list),
I can run the following BEFORE i install the replica and it works 100%, it is part of our pre-reqs in our docs to make sure comms work.
After i install the replica with ipa-replica-install. (no DNS, no CA) then running the above ipa-replica-conncheck command fails and we see the errors as described.
Some logs:
1. before ipa-replica-install - conn check works.
2. after successful ipa-replica-install - but conn check fails
new replica versions
[root@ipa011 ~]# rpm -qa | grep ipa | sort
almalinux-logos-ipa-90.5.1-1.1.el9.noarch
ipa-client-4.10.1-6.el9.x86_64
ipa-client-common-4.10.1-6.el9.noarch
ipa-common-4.10.1-6.el9.noarch
ipa-healthcheck-0.12-1.el9.noarch
ipa-healthcheck-core-0.12-1.el9.noarch
ipa-selinux-4.9.8-7.el9_0.noarch
ipa-server-4.10.1-6.el9.x86_64
ipa-server-common-4.10.1-6.el9.noarch
ipa-server-dns-4.10.1-6.el9.noarch
libipa_hbac-2.8.2-2.el9.x86_64
python3-ipaclient-4.10.1-6.el9.noarch
python3-ipalib-4.10.1-6.el9.noarch
python3-ipaserver-4.10.1-6.el9.noarch
python3-libipa_hbac-2.8.2-2.el9.x86_64
sssd-ipa-2.8.2-2.el9.x86_64
current master versions
[nicholas.cross@ipa008 ~]$ rpm -qa | grep ipa | sort
almalinux-logos-ipa-90.5.1-1.1.el9.noarch
ipa-client-4.10.0-8.el9_1.x86_64
ipa-client-common-4.10.0-8.el9_1.noarch
ipa-common-4.10.0-8.el9_1.noarch
ipa-healthcheck-0.9-9.el9.noarch
ipa-healthcheck-core-0.9-9.el9.noarch
ipa-selinux-4.9.8-7.el9_0.noarch
ipa-server-4.10.0-8.el9_1.x86_64
ipa-server-common-4.10.0-8.el9_1.noarch
ipa-server-dns-4.10.0-8.el9_1.noarch
libipa_hbac-2.7.3-4.el9_1.3.x86_64
python3-ipaclient-4.10.0-8.el9_1.noarch
python3-ipalib-4.10.0-8.el9_1.noarch
python3-ipaserver-4.10.0-8.el9_1.noarch
python3-libipa_hbac-2.7.3-4.el9_1.3.x86_64
sssd-ipa-2.7.3-4.el9_1.3.x86_64
thanks,
Nick