Kimmo Rantala via FreeIPA-users wrote:
Figured it out.
I think it was this was because of I compiled checkipaconsistency on the replica. The
errors pointed me towards pyasn1 and sure enough the pip versions on the first master and
the replica differed:
First master:
pyasn1 0.1.9
pyasn1-modules 0.0.8
Replica:
pyasn1 0.4.7
pyasn1-modules 0.2.6
After doing pip uninstall pyasn1 ; pip uninstall pyasn1-modules, pip list shows on the
replica:
pyasn1 0.1.9
pyasn1-modules 0.0.8
After this ipa-healthcheck --failures-only returns 0 issues.
Perfect, thanks for testing.
rob