Elhamsadat Azarian via FreeIPA-users wrote:
Dear friends
I instalked freeIPA on centos 7 with external DNS and internal CA server.
It finished successfuly but with a failed message about installing client components!
Anyway i open a web browser and browse freeipa page. It showed and i add exeption for
certificate.
Then login page appeared. I inserted admin user and pasdword but it showed error.
"Invalid CA renewal master. All masters must have CA server role enabled"
It didn't install successfully if the client configuration failed.
You'll need to look at /var/log/ipaclient-install.log to see why it failed.
rob