#6689 Topology Suffix ca missing when installing CA into non-CA IDM
Closed: worksforme by rcritten. Opened by pvoborni.

Ticket was cloned from Red Hat Bugzilla (product Fedora): Bug 1418883

Description of problem:
When installing a CA using "ipa-ca-install" into a domain without a CA
installed, the CA topology suffix does not appear.  When running "ipa
topologysuffix-find", only the domain suffix appears, also in Web UI, the CA
Topology suffix does not appear.
This doesn't appear to be causing any issues.
Installing the CA on a second IPA server in the domain, causes the domain to
appear normally, and is shown as being managed by the second server, but not by
the first.
Version-Release number of selected component (if applicable): 4.4.3-1
How reproducible: Always
Steps to Reproduce:
1. Install IPA without a CA (external signed server certificate).
"ipa-server-install --dirsrv-cert-file=server.p12 --http-cert-file=server.p12"
2. Install CA to Server.  "ipa-ca-install"
3. View topology "ipa topologysuffix-find"
Actual results:
Only the "domain" suffix will appear.
Expected results:
Both "domain" and "ca" suffixes should show.
Additional info:
Comparing the "dc=DOMAIN" tree on a server that had a CA installed after the
domain, the "cn=ca,cn=topology,cn=ipa,cn=etc,dc=DOMAIN" object is missing, as
well as the "ipaReplTopoManagedSuffix: o=ipaca" attribute under
"cn=SERVER,cn=masters,cn=ipa,cn=etc,dc=DOMAIN".  Those values exist if a CA is
installed with the initial server install, or for a replica that is installed
after a CA has been added to the domain.

Stretch for 4.5


Metadata Update from @pvoborni:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5

Metadata Update from @mbasti:
- Issue close_status updated to: None
- Issue set to the milestone: FreeIPA 4.5.1 (was: FreeIPA 4.5)

Metadata Update from @pvoborni:
- Issue set to the milestone: FreeIPA 4.7 (was: FreeIPA 4.5.1)

Metadata Update from @rcritten:
- Issue set to the milestone: FreeIPA 4.7.1 (was: FreeIPA 4.7)

FreeIPA 4.7 has been released, moving to FreeIPA 4.7.1 milestone

Works for me in 4.7.2.

Metadata Update from @rcritten:
- Issue close_status updated to: worksforme
- Issue status updated to: Closed (was: Open)

Metadata