Ticket was cloned from Red Hat Bugzilla (product Fedora): Bug 1418883
Description of problem: When installing a CA using "ipa-ca-install" into a domain without a CA installed, the CA topology suffix does not appear. When running "ipa topologysuffix-find", only the domain suffix appears, also in Web UI, the CA Topology suffix does not appear. This doesn't appear to be causing any issues. Installing the CA on a second IPA server in the domain, causes the domain to appear normally, and is shown as being managed by the second server, but not by the first. Version-Release number of selected component (if applicable): 4.4.3-1 How reproducible: Always Steps to Reproduce: 1. Install IPA without a CA (external signed server certificate). "ipa-server-install --dirsrv-cert-file=server.p12 --http-cert-file=server.p12" 2. Install CA to Server. "ipa-ca-install" 3. View topology "ipa topologysuffix-find" Actual results: Only the "domain" suffix will appear. Expected results: Both "domain" and "ca" suffixes should show. Additional info: Comparing the "dc=DOMAIN" tree on a server that had a CA installed after the domain, the "cn=ca,cn=topology,cn=ipa,cn=etc,dc=DOMAIN" object is missing, as well as the "ipaReplTopoManagedSuffix: o=ipaca" attribute under "cn=SERVER,cn=masters,cn=ipa,cn=etc,dc=DOMAIN". Those values exist if a CA is installed with the initial server install, or for a replica that is installed after a CA has been added to the domain.
Stretch for 4.5
Metadata Update from @pvoborni: - Issue assigned to someone - Issue set to the milestone: FreeIPA 4.5
Metadata Update from @mbasti: - Issue close_status updated to: None - Issue set to the milestone: FreeIPA 4.5.1 (was: FreeIPA 4.5)
Metadata Update from @pvoborni: - Issue set to the milestone: FreeIPA 4.7 (was: FreeIPA 4.5.1)
Metadata Update from @rcritten: - Issue set to the milestone: FreeIPA 4.7.1 (was: FreeIPA 4.7)
FreeIPA 4.7 has been released, moving to FreeIPA 4.7.1 milestone
Works for me in 4.7.2.
Metadata Update from @rcritten: - Issue close_status updated to: worksforme - Issue status updated to: Closed (was: Open)