[Freeipa-users] Re: ca replication for hosts with different dns domains
On ma, 06 huhti 2020, askstack--- via FreeIPA-users wrote:
Hi
IDM domain: "fist.domain"
Host name: host1.first.domain
host2.second.domain
I was able to run "ipa-client-install" on host2 and promoted it to a domain
replica. After I verified domain replication was working, I tried to run ipa-ca-install.
It failed on host2.
Redhat support said host1 and host2 are on two different dns domains so replication is not
supported. I am not sure that is the case since two hosts are in the same and onlyIDM
domain replication group.
Is redhat support correct?
I think there is not enough details in your request to answer that
question. I also don't know what do you mean by 'IDM domain replication
group'.
In particular, what are the errors you are seeing, exactly?
If you have a case open, please share the number and communicate within
the case, not with with an anonymous account on a public mailing list.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland