On su, 02 joulu 2018, 74cmonty via FreeIPA-users wrote:
Hi,
after completing master installation I started setup of replica.
This means I first enrolled the replica server as a client and then executed this
command:
ipa-replica-install
The installation log reports this error:
Full PKINIT configuration did not succeed
The setup will only install bits essential to the server functionality
You can enable PKINIT after the setup completed using 'ipa-pkinit-manage'
Is this an error or normal behavior of replica installation?
It is a bug tracked at
https://pagure.io/freeipa/issue/7200.
For a solution try to move away both /var/kerberos/krb5kdc/kdc.key and
kdc.crt, then re-run 'ipa-pkinit-manage enable', this is what a pull
request at
https://github.com/freeipa/freeipa/pull/2630 is doing.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland