On Wed, Mar 6, 2019 at 5:35 PM Rob van Halteren via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
I had to replace the IPA-server due to loss of CA
Original setup was that all clients were connected to a replica-server v3.0 on centos 6
that hosted the domain and realm OURDOMAIN.EXAMPLE
I configured a new IPA-master v4.6.4 on centos 7 with the same domain,realm, and id-range
and reconnected all clients to the new master.
I used ipa-client-install --uninstall , cleared /var/lib/sss/db/*, and ran
ipa-client-install
All clients now login from the new ipa-master. All woks fine as long as I leave the old
replica-server online. As soon as I turn it off, my clients start to suffer problems after
a couple of hours or next day that
cause several applications to stall when opening. Eg Firefox browser will not start any
more. DNS is online and resolves requests
What does the following say:
dig SRV _ldap._tcp.ipa_domain
when both old and new instances are online?
When I then start the old replica again all function restore almost
immediately as it comes online.
Is /home an NFS share mounted on these clients?
> Does someone has any idea what could be happening ?
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...