freeipa

#7008 ipa-replica-install --setup-kra if first KRA in topology fails
Closed: fixed Opened by pvoborni.

Closed: fixed
Reopen Issue

Reproducible by test: TestInstallWithCA2

  1. Install master with CA, without KRA:
  2. install replica with KRA by direct option of ipa-replica-install (--setup-kra)
RUN ['ipa-replica-install', '-p', 'Secret123', '-w', 'Secret123', '-U', '--setup-ca', '--setup-kra', '--setup-dns', '--forwarder', 'xx.xx.xx.xx', '-r', 'DOM-0XX.EXAMPLE.COM']
ipa         : ERROR    There is no KRA server in the domain, can't setup a KRA clone

So it incorrectly expects some KRA installed instead of creating a first KRA.

Would be good to try also separate ipa-kra-install on replica.

This may be related to https://pagure.io/freeipa/issue/7013

Metadata Update from @pvoborni:
- Issue priority set to: critical
- Issue set to the milestone: FreeIPA 4.6

Metadata Update from @fbarreto:
- Issue assigned to fbarreto

PR: https://github.com/freeipa/freeipa/pull/894

Metadata Update from @tkrizek:
- Issue set to the milestone: FreeIPA 4.6.1 (was: FreeIPA 4.6)

Metadata Update from @tkrizek:
- Issue set to the milestone: FreeIPA 4.6.2 (was: FreeIPA 4.6.1)

master:

  • cd80036b6b4fdfc843aac52126f01fdb1fc1067d tests: Mark failing tests as failing

Metadata Update from @pvoborni:
- Issue tagged with: test-failure

ipa-4-6:

  • e8a3c0e768ae2b46912d7b501f21d45072a15b6f tests: Mark failing tests as failing

Metadata Update from @tdudlak:
- Issue set to the milestone: FreeIPA 4.6.3 (was: FreeIPA 4.6.2)

Hello, any update on this?

We have a PR to fix this, however, IIRC we depend on PKI side to avoid adding another option in the ipa-server-install: https://pagure.io/dogtagpki/issue/1585

The PKI ticket says " - Issue set to the milestone: FUTURE", so probably not much was done.

Metadata Update from @rcritten:
- Issue set to the milestone: FreeIPA 4.6.4 (was: FreeIPA 4.6.3)

FreeIPA 4.6.3 has been released, moving to FreeIPA 4.6.4 milestone

Metadata Update from @rcritten:
- Issue set to the milestone: FreeIPA 4.6.5 (was: FreeIPA 4.6.4)

master:

  • 530da69eadf5b73e4ca83252e3a370ed70354a39 Fix KRA replica installation from CA master

ipa-4-6:

  • b9beda34886d99374e5892cf50e32a8ff95c09f4 Fix KRA replica installation from CA master

ipa-4-5:

  • fd5f000d1379daf263711f1f34ad97ac75dfcde7 Fix KRA replica installation from CA master

Metadata Update from @tdudlak:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • https://pagure.io/freeipa/c/ad85cc8eae8544680bd083d76d7bf8997856d4a7 PRCI failures fix
Edited by sorlov

ipa-4-7:

  • https://pagure.io/freeipa/c/24b97b31532549222716a5e0d367a1591a89730f
Metadata

test-failure

None
None
Low
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.