Hello,
I'm currently running into an issue when trying to do the ipa-replica-install.
I did the ipa-replica-prepare command and copied the replica gpg file to the new replica
server and run the following command to do the install
Ipa-replica-install -setup-ca -setup-dns -no-forwarders
/var/lib/ipa/replica-info-server.domain.ca.gpg
I get the following error part way through the process;
DatabaseError: Server is unwilling to perform: modification of attribute
nsds5replicaleasetimeout is not allowed in replica entry
I looked at the log and saw the following'
DEBUG The ipa-replica-install command failed, exception: DatabaseError: Server is
unwilling to perform: Modification of attribute nsds5replicaleasetimeout is not allowed in
replica entry
ERROR Server is unwilling to perform: modification of attribute nsds5replicaleasetimeout
is not allowed in replica entry
I did a search and could not find the nsds5replicaleasetimeoute entry in LDAP.
Is this something I can add myself? Or is there something else that needs to be done? I
don't see much information on this error when searching.
I had a replica before and removed it so I'm not quite sure what is going on with
this.
The only difference I can see between the 2 replica's is this new one is running a
slightly newer version of RHEL, IPA and 389.
Master Server information:
RHEL 7.1
IPA version 4.1.0-18
389-ds 1.3.3.1-13
Replica Server Information:
RHEL 7.7
IPA Version 4.6.5-11
389-ds 1.3.9.1-18
Thanks,
Matt
Show replies by date