Hi,

if the KRA installation fails, the only way to recover is to uninstall IPA on the node with ipa-server-install --uninstall and start over with ipa-replica-install, supposing there is another master to replicate from. Make sure that the node to uninstall is not a single point of failure for other services (DNS, CA...)

flo

On Mon, Jan 17, 2022 at 7:41 PM lejeczek via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Hi guys.

Is this critical on its face and un/reinstall is necessary or some
troubleshooting can still reveal it's all good?

...

   [4/10]: destroying installation admin user
   [5/10]: enabling ephemeral requests
   [6/10]: restarting KRA
   [7/10]: configure certmonger for renewals
   [8/10]: configure certificate renewals
   [error] DBusException: org.fedorahosted.certmonger.duplicate:
Certificate at same location is already used by request with nickname
"20210709164208".

Your system may be partly configured.
If you run into issues, you may have to re-install IPA on this server.

org.fedorahosted.certmonger.duplicate: Certificate at same location is
already used by request with nickname "20210709164208".

many thanks, L.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure