freeipa

#5590 ipa-replica-install fails with 4.3.0 on debian
Closed: fixed Opened by tjaalton.

Closed: fixed
Reopen Issue

While trying to test the new replica promotion on Debian I bumped into an issue where it tries to use ldaps to contact the server, which fails for obvious reasons (interop fail with GNUTLS)

Steps to reproduce:

  • install server
  • install client
  • kinit admin on client
  • ipa-replica-install on client

I'll attach the install logfile.

attachment
paste_362414

FWIW: This may be fixed by adding conn=conn on line 1002 of replicainstall.py

sigh the problem is that we set "ldaps" explicitly a few lines above.
disregard comment #1

triage:

  • goal: use only gssapi not ldaps, manifested on Debian because it can use ldaps
  • simo: start with that one place to fix ldaps, we are only interested for installation, not runtime

note: replica installation with CA in CA less -> CA conversion uses LDAPS so if we want to fix it that must be addressed first, #6226 and related 276d16775a4ce8af5d39ca8a7bf5bcd638df343f

Metadata Update from @tjaalton:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5 backlog

The original attachment is no longer available. I'm not sure what exactly went wrong. Since 4.3.0 is rather old and we haven't seen any replica installation issues related to LDAPS in a while, I'm closing this bug as fixed.

Timo, please reopen the bug if you still have issues.

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
Metadata
None
None
None
Normal
defect
Replication
0
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.