I'm trying run ipa-replica-install on a non-IPA joined CentOS 8.2 system:
ipa-replica-install --principal admin --admin-password='SECRET'
Configuring client side components
This program will set up IPA client.
Version 4.8.4
Using existing certificate '/etc/ipa/ca.crt'.
Skip SERVER1: cannot verify if this is an IPA server
Skip SERVER2: cannot verify if this is an IPA server
Skip SERVER3: cannot verify if this is an IPA server
Unable to find IPA Server to join
The ipa-client-install command failed. See /var/log/ipaclient-install.log for
more information
ipaclient-install.log has:
2020-06-18T18:22:05Z DEBUG [LDAP server check]
2020-06-18T18:22:05Z DEBUG Verifying that SERVER1 (realm
NWRA.COM) is an IPA
server
2020-06-18T18:22:05Z DEBUG Init LDAP connection to: ldap://SERVER1:389
2020-06-18T18:22:05Z DEBUG Error checking LDAP: Connect error:
error:1416F086:SSL routines:tls_process_server_certificate:certificate verify
failed (self signed certificate in certificate chain)
2020-06-18T18:22:05Z WARNING Skip SERVER1: cannot verify if this is an IPA server
How can I resolve this?
Thanks,
Orion
--
Orion Poplawski
Manager of NWRA Technical Systems 720-772-5637
NWRA, Boulder/CoRA Office FAX: 303-415-9702
3380 Mitchell Lane orion(a)nwra.com
Boulder, CO 80301
https://www.nwra.com/