Hi Rob,
I took two backups from this month. The 1st one I tried was from December 5th, and the
more recent one was from the 16th. The replica did exist at the time I took the backup.
Are there implications deleting the replica VMs and starting from scratch? The only way I
was able to get the restore to work was, I just restored the primary server and then I
deleted the VM the replica was on and I rebuilt it and setup replication from scratch.
Tyler
From: Rob Crittenden <rcritten(a)redhat.com>
Date: Wednesday, December 21, 2022 at 5:49 AM
To: FreeIPA users list <freeipa-users(a)lists.fedorahosted.org>
Cc: Hirata, Tyler <thirata(a)caltech.edu>
Subject: Re: [Freeipa-users] LDAP error after re-initializing replica server
Hirata, Tyler via FreeIPA-users wrote:
I’m testing out IPA and wanted to see how restoring backups work. I
successfully restored an older backup to my master node, but when I hop
on my replica nodes and run the re-initialization command, I get an LDAP
error. I was wondering if anyone has experienced this?
ipa-replica-manage re-initialize --from
ipa1.domain.com
Update in progress, 15 seconds elapsed
[ldaps:// ipa1.domain.com:636] reports: Update failed! Status: [Error
(49) - LDAP error: Invalid credentials - no response received]
I’ve cleared all my Kerberos cache by running kdestroy and I restarted
directory services and rebooted the primary and secondary servers.
How old was this restore? Did the replica exist when the backup was taken?
rob