Red Hat Bugzilla – Bug 1437502
ipa-replica-install fails with requirement to use --force-join that is a client install option.
Last modified: 2017-08-01 05:47:49 EDT
Description of problem: Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Bug was saved without description: Customer is installing replica: ipa-replica-install --server <server> --domain <domain> --realm <realm> --setup-ca --setup-dns --no-forwarders --principal admin --admin-password some-passwd Configuring client side components Client hostname: XXXX Realm: XXXXX DNS Domain: XXXX IPA Server: xXXXXXX BaseDN: XXXXXXXX Skipping synchronizing time with NTP server. Successfully retrieved CA cert Subject: CN=Certificate Authority,O=XXXX Issuer: CN=Certificate Authority,O=XXXX Valid From: Wed Mar 01 11:51:48 2017 UTC Valid Until: Sun Mar 01 11:51:48 2037 UTC Joining realm failed: Host is already joined. Use --force-join option to override the host entry on the server and force client enrollment. Installation failed. Rolling back changes. IPA client is not configured on this system. Removing client side components IPA client is not configured on this system. But when he wants to install replica with --force-join, it does not work because it's an ipa-client-install option. The workaround is to do a first ipa-client-install --force-join and then a ipa-replica-install
If there is high demand we might try to fix this in 7.4(add --force-join option to replica installer) (there was already a preliminary patch), if not, I'd rather post-pone to future release.
Upstream ticket: https://pagure.io/freeipa/issue/6183
Fixed upstream master: https://pagure.io/freeipa/c/87051f51c695afa3e9ba072da7005cf1a4194668 https://pagure.io/freeipa/c/db84516d23d3a6e53e95881828d494fb80647602 ipa-4-5: https://pagure.io/freeipa/c/72f0ecde783be7d304044eff60c8c85e160d65d8 https://pagure.io/freeipa/c/534df55ea5ae736db832e0885520a6dfbd09299a
Version verified using IPA version :: ipa-server-4.5.0-14.el7.x86_64 Marking BZ as verified. See attachment as console.log.
Created attachment 1284349 [details] console.log
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:2304