freeipa

#9635 Ignore time skew during CA replica installation
Closed: fixed by frenaud. Opened by frenaud.

Closed: fixed
Reopen Issue

Issue

During a replica CA installation, the initial replication step may fail if there is too much time skew because the server and replica.

The replica installer already takes care of this for the replication of the domain suffix but the replica CA installer does not set nssldapd-ignore-time-skew to on.

Cloned from https://issues.redhat.com/browse/RHEL-27856 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-27856, https://issues.redhat.com/browse/RHEL-49592

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/7450

master:

  • 3b21e191a9ff43bb293bc075a4a26b07375485cc Replica CA installation: ignore time skew during initial replication

ipa-4-12:

  • aadb8051d4a3172aac3790f47ff4d241a245bab4 Replica CA installation: ignore time skew during initial replication

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • b56d434953b93a0cecd2ee57194862e36b2ae3b2 ipatests: Test to check that the configured value for "nsslapd-ignore-time-skew" remains on even after a "force-sync" is done

ipa-4-12:

  • f5c723720417f85a218e753c39659cae01a33a96 ipatests: Test to check that the configured value for "nsslapd-ignore-time-skew" remains on even after a "force-sync" is done

ipa-4-9:

  • 19f22cf75ae768dd2b6c0d674cf55f8d6ffafb31 Replica CA installation: ignore time skew during initial replication
  • a6bb2fa4997dd7894dbf75d1c3fd1deaebd3e05c ipatests: Test to check that the configured value for "nsslapd-ignore-time-skew" remains on even after a "force-sync" is done
Metadata
None
None
None
None
https://github.com/freeipa/freeipa/pull/7450
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.