[Freeipa-users] Re: IPA CA request ID reuse issue

[Fraser Tweedale]

On Thu, Sep 17, 2020 at 12:41:37PM -0000, Boris Sukhinin via FreeIPA-users wrote:
> I can confirm that rebuilding VLV solved the issue. After restoring overwritten certificate requests from backup we were able to add new replicas to the FreeIPA cluster without any problems.
>
> Fraser, thank you very much, your help was extremely valuable.
>
> Best regards,
> Boris

You are welcome, Boris.  I'm glad the issue is resolved.

Would you mind having a look through the DS error and access logs on
the affected system, to see if there are any clues about why the VLV
index became inconsistent?

I also wrote a blog post about this scenario:
https://frasertweedale.github.io/blog-redhat/posts/2020-09-17-dogtag-vlv-cor...

Thanks,
Fraser