freeipa

#8366 CA-less replica deployment fails with --setup-ca
Closed: fixed by frenaud. Opened by twoerner.

Closed: fixed
Reopen Issue

Issue

With a ca-less PR for ansible-freeipa I ran into an issue with setting up CA-less replica and the option ipareplica_setup_ca: https://github.com/freeipa/ansible-freeipa/pull/298#issuecomment-641849890
The command line installer is failing in the same way when I combine --[http,dirsrv,pkinit]-cert-file options with --setup-ca:

The remote master does not have a CA installed, can't set up CA

Example

ipa-replica-install --dirsrv-cert-file ca-less-test/dirsrv.p12 --dirsrv-cert-name dirsrv-cert --dirsrv-pin SomePKCS12password --http-cert-file ca-less-test/httpd.p12 --http-cert-name httpd-cert --http-pin SomePKCS12password --pkinit-cert-file ca-less-test/pkinit.p12 --pkinit-cert-name pkinit-cert --pkinit-pin SomePKCS12password -P admin -p --setup-ca

Metadata Update from @frenaud:
- Issue assigned to frenaud

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4802

Metadata Update from @frenaud:
- Issue set to the milestone: FreeIPA 4.8.8

master:

  • 51cb631db39361918add4b5100d2bfaa90ab9b23 ipa-replica-install: --setup-ca and *-cert-file are mutually exclusive
  • 98c1017caa03cff5b73723873ef86fc1d4c0fb2a ipatests: add a test for ipa-replica-install --setup-ca --http-cert-file

ipa-4-8:

  • 32c4df70e36a0aeafc12e2ade85ee9c915774c44 ipa-replica-install: --setup-ca and *-cert-file are mutually exclusive
  • 0e325bd0c01eecc6d48b10f9b7f654b16068a522 ipatests: add a test for ipa-replica-install --setup-ca --http-cert-file

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.