[Freeipa-users] Re: FreeIPA Replica Install Issue

[Jerome Talbert]

Thank you, Rob!

From: Rob Crittenden <rcritten(a)redhat.com&gt;
Date: Monday, February 27, 2023 at 8:41 AM
To: FreeIPA users list <freeipa-users(a)lists.fedorahosted.org&gt;
Cc: Jerome Talbert <jtalbert(a)passur.com&gt;
Subject: Re: [Freeipa-users] FreeIPA Replica Install Issue
[You don't often get email from rcritten(a)redhat.com. Learn why this is important at
https://aka.ms/LearnAboutSenderIdentification ]

Jerome Talbert via FreeIPA-users wrote:
>  Hello,
>
>
>
>  We had an issue with one of replicas and decided to remove it from the
>  topology and run the ipa-server-install –uninstall command on the
>  replica. I also went through and removed all the SRV records related to
>  the replica.
>
>
>
>  The idea was to reinstall the same server as replica again using the
>  command:
>
>  ipa-replica-install --setup-dns --setup-ca --principal=admin
>  --password='############' --no-forwarders
>
>
>
>  When I try to run the command, I get the following error message:
>
>  ipapython.admintool: ERROR    Cannot install replica of a server of
>  higher version ((u'00000004', u'00000006', u'00000008',
> '*final')) than
>  the local version ((u'00000004', u'00000006', u'00000006',
> '*final'))
>
>  ipapython.admintool: ERROR    The ipa-replica-install command failed.
>  See /var/log/ipareplica-install.log for more information
>
>
>
>  Any ideas what might be going on here? Do I have something left-over on
>  the replica that needs to be cleaned up manually first? 
As the message says, you are trying to create a new server using a lower
version than the remote server. A higher local version is allowed for
upgrades but not the other way around. (4.6.8 remote, 4.6.6 local).

Updating the IPA packages on your replica should fix it.

rob