[Freeipa-users] IPA replica install "A CA is already configured on this system."

[Martin Kosek]

On 06/25/2012 11:37 PM, Dan Scott wrote:
> Hi,
> 
> I'm trying to install a new Fedora 17 replica of my existing Fedora 16
> FreeIPA servers as part of my migration process.
> 
> I first attempted the installation using an old replica file, but ran
> into some issues so I uninstalled and generated a new replica file.
> 
> Now, when I run the command, I get:
> 
> Connection from master to replica is OK.
> 
> Connection check OK
> Configuring ntpd
>   [1/4]: stopping ntpd
>   [2/4]: writing configuration
>   [3/4]: configuring ntpd to start on boot
>   [4/4]: starting ntpd
> done configuring ntpd.
> A CA is already configured on this system.
> 
> I've tried running "ipa-server-install --uninstall" multiple times,
> but nothing changes.
> 
> Can someone help?
> 
> Dan
> 

Hello,

It seems that PKI CA is still configured in /var/lib/pki-ca. You may
try to force IPA CA removal with this command:

# pkiremove -pki_instance_root=/var/lib -pki_instance_name=pki-ca -force

Martin