just calling ipa-replica-install on a brand new machines fails in the ipa-client-install step. The client tries to configure w/o interactively asking information (an account authorized to join the discovered domain).
Even after manually installing ipa-client-install however it fails to pick up cfredentials if available. kinit admin && ipa-replica-install should wor but instead it still asks for the admin password. and sometimes instead it asks for host/fqdn@REALM@domain's password (??!)
I can't reproduce the second part reliably, sometimes it works
ipa-replica-install does not have an interactive mode yet so it's expected it'd fail in the first part. I am also not able to reproduce the second part, should it happen again, could you please provide ipaclient/ipareplica-install logs + perhaps the state of the ccache?
Interactive mode for ipa-replica-install is #6068, changing subject to the second issue(credential passing).
It might be fixed in 4.5.
Metadata Update from @simo: - Issue assigned to someone - Issue set to the milestone: FreeIPA 4.5
Metadata Update from @mbasti: - Issue close_status updated to: None - Issue set to the milestone: FreeIPA 4.5.1 (was: FreeIPA 4.5)
This was not reproduced for longer time. Or I'm not aware of it. Closing.
Metadata Update from @pvoborni: - Issue close_status updated to: worksforme - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.