Bug 1403844

Summary:	ipa Client failes to join when ca.cert is missing
Product:	Red Hat Enterprise Linux 7	Reporter:	Kim Borup <kborup>
Component:	ipa	Assignee:	IPA Maintainers <ipa-maint>
Status:	CLOSED DUPLICATE	QA Contact:	Kaleem <ksiddiqu>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	7.3	CC:	pvoborni, rcritten
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-12-12 14:40:03 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Kim Borup 2016-12-12 13:41:08 UTC

Description of problem:
When you have a replica Setup, the replica is not making a copy of the ca to /usr/share/ipa/html/ca.crt, making ipa-client-install --Password= fail if a replica is hit, due to the Ca.crt missing. 

ls -l /usr/share/ipa/html/ca.crt will come out empty
Where on Server 1 it will be there. 

Check missing in replica install for ca.crt

And Client Needs to say if it can not download a ca.crt instead of giving wrong Password. 


Version-Release number of selected component (if applicable):
ipa-client-common-4.4.0-12.el7.noarch
ipa-client-4.4.0-12.el7.x86_64

ipa-server-4.4.0-12.el7.x86_64
ipa-server-dns-4.4.0-12.el7.noarch
ipa-server-common-4.4.0-12.el7.noarch
ipa-server-trust-ad-4.4.0-12.el7.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Install IPA-server
2. Create Ad-Trust
3. setup-replica of IPA Server
4. Create Client ipa host-add hostname.example.com --Password=flaf
5. on Client ipa-client-install --Password=flaf
6. If IDM Server 1 is hit it will work, if replica is hit 

Actual results:
Server Fails with Password wrong. 

Expected results:
Server joined the AD.

Additional info:

Comment 2 Kim Borup 2016-12-12 14:40:03 UTC


*** This bug has been marked as a duplicate of bug 1387779 ***