[Freeipa-users] Problem with AD users after upgrade
I did an IPA migration from CentOS 7 machines to OL 8.1 following the
procedure as documented in
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/...
.
Today I found out that only four of my eight IPA servers do resolve AD
users (tested with id <AD_user> on every IPA server). The setup
procedure did not differ. (except for machine no. 1 which is the CA
renewal master)
AD users are resolved on machines 1, 5, 6 and 8. Machine 2, 3, 4 and 7
do not resolve AD users.
Only machines 1, 2, 5 and 6 should have become trust controllers but
when I had a look at the server roles in the WebGUI I saw the trust
controller role on every machine. Is it possible to remove the trust
controller role on 4 of the 8 machines?
Where should I take a closer look?
Cheers,
Ronald