Hi,
I have the same issue right now...
I had two working replicas, and I tried to add the third one. But due to some issues with
ansible playbook, the installation of that third replica failed in the middle (I believe
ansible lost SSH connection somewhere in the middle). That obviously left the new replica
in kinda undefined state, which is not my issue. My issue is that it affected WebUI of
both other two replicas.
Exactly as the others report, I can no longer login to the WebUI. It says "invalid
'PKINIT enabled server': all masters must have IPA master role enabled" and
then throws an exception:
TypeError: Cannot read property 'ipapwdexpadvnotify' of undefined
at Object.y.update_password_expiration
(
https://rhel-ipa-replica.ams.ims.telekom.de/ipa/ui/js/freeipa/app.js?4060...)
at Object.start_runtime
(
https://rhel-ipa-replica.ams.ims.telekom.de/ipa/ui/js/freeipa/app.js?4060...)
at Object.<anonymous>
(
https://rhel-ipa-replica.ams.ims.telekom.de/ipa/ui/js/freeipa/app.js?4060...)
at
https://rhel-ipa-replica.ams.ims.telekom.de/ipa/ui/js/freeipa/app.js?4060...
at Object.forEach
(
https://rhel-ipa-replica.ams.ims.telekom.de/ipa/ui/js/dojo/dojo.js?v=4060...)
at Object._run_phase
(
https://rhel-ipa-replica.ams.ims.telekom.de/ipa/ui/js/freeipa/app.js?4060...)
at Object.next_phase
(
https://rhel-ipa-replica.ams.ims.telekom.de/ipa/ui/js/freeipa/app.js?4060...)
at Object.<anonymous>
(
https://rhel-ipa-replica.ams.ims.telekom.de/ipa/ui/js/freeipa/app.js?4060...)
at c
(
https://rhel-ipa-replica.ams.ims.telekom.de/ipa/ui/js/dojo/dojo.js?v=4060...)
at e.extend.then.then.t.then
(
https://rhel-ipa-replica.ams.ims.telekom.de/ipa/ui/js/dojo/dojo.js?v=4060...)
All the commands offered in this thread give me the same error so far: "invalid
'PKINIT enabled server': all masters must have IPA master role enabled"
Fortunately, it seems that the domain services keep working fine, users can login etc. But
WebUI is dead, and the failed replica is stuck in the list of ipa-replica-manage...
Sounds like a bug...?
---
Regards,
Dmitry Perets