Boris via FreeIPA-users wrote:
Hi,
I just got two IPA servers handed over and those are a mess.
To get this sorted out I want to start with having both as a CA host. Even the webUI says "It is strongly recommended to keep the following services installed on more than one server: CA"
I have basically 0 knowledge about IPA, the named is crashing ragularly with asseratation errors, the login on the 2nd IPA webinterface fails "due to unknown reason", updates on the first IPA are not working and the host ist started with "ipactl start --force" and no one know the directorymanager password anymore.
So I thought to start small and get the second CA running.
Can you provide more information?
What OS and version of IPA?
Why does your first server require a force start? What does it log when you don't?
You need a fully working CA to add another one.
rob