Page History

...

1. SSH to the current LDAP machine you have
2. become root
3. Run the following 

   Code Block
   python3 /usr/libexec/ipa/oddjob/org.freeipa.server.config-enable-sid --add-sids

4. restart ipa 

   Code Block
   ipactl restart

5. finally kinit with the LDAP admin user ( you can find it in Morpheus Cypher → secret/ipaadmin_username, password/ipaadmin and try to run ipa commands to verify the above error is no more there) 

   Code Block
   kinit <ldap-admin-user>

6. Finish procedure for new rocky 8 replica
   1. Delete OLD LDAP machine DNS records 

      Code Block
      ipa-replica-manage del OLD_LDAP_HOSTNAME --force

   2. Replace the NEW LDAP machine IP DNS records with the IP of the interface of the OLD LDAP machine 

      Code Block
      ipa dnsrecord-mod DNS_HOSTED_ZONE ipa-ca --a-rec OLD_LDAP_PRIVATE_IP ipa dnsrecord-mod DNS_HOSTED_ZONE NEW_LDAP_HOSTNAMESERVER_NAME --a-rec OLD_LDAP_PRIVATE_IP

   3. Edit the /etc/hosts file and make sure it is as follow: 

      Code Block
      [murdaca@ipa ~]$ cat /etc/hosts <!-- BEGIN ANSIBLE MANAGED BLOCK --> OLD_LDAP_PRIVATE_IP NEW_LDAP_HOSTNAME <!-- END ANSIBLE MANAGED BLOCK -->

      
      

...

• DNS_HOSTED_ZONE→ logging in Morpheus → Tools → Cypher and check the following secret → secret/ldap_domain
• OLD_LDAP_PRIVATE_IP → logging in Morpheus → Provisioning → Instances, check your OLD LDAP VM IP address
• OLD_LDAP_HOSTNAME → logging in Morpheus → Tools → Cypher and check the following secret → secret/ldap_hostname
• NEW_LDAP_HOSTNAME → <name-of-the-machine>.<tenancy-domain> where tenancy-domain → logging in Morpheus → Tools → Cypher and check the following secret → secret/ldap_domain (e.g. the result should be something like ldap-test-rocky.eumetsat.sandbox.ewc). Alternatively you can find it in /etc/hosts file in your new LDAP SERVER_NAME → name of the machine
  

Resource: https://access.redhat.com/solutions/7052125

...