ipa-replica-conncheck(1)

📦 version 4.13.4, in centos-stream 10, centos-stream 9, fedora 43, fedora 44

💖 ipa-replica-conncheck — the vibe check for your replica↔master network, bestie

So like… ipa-replica-conncheck(1), from the IPA Manual Pages. She checks a replica-master network connection before installation, and honestly? She's the friend who tells you your firewall is a mess before the whole install falls apart. 🫶

✨ SYNOPSIS ✨

ipa-replica-conncheck [OPTION]...

🌸 DESCRIPTION 🌸

okay so picture this: you're installing an IPA replica, and for master-replica communication to work, there has to be a network connection all prepped between the replica machine and a replicated IPA master machine. and if that connection is flawed?? the installation can just fail with the most inconvenient error messages ever. 😭

the classic connection problem, the one that ruins everyone's day: a misconfigured firewall with a required port closed on a replica or a master machine. it's giving "who touched the firewall rules." 💀

the way this works is that the connection gets checked by running a set of tests from both the master and the replica machines. the program is incorporated into ipa-replica-install(1), but you can also just run it separately. main character energy, honestly. ✨

💅 OPTIONS 💅

🎀 REPLICA MACHINE OPTIONS 🎀

this set of options is what you reach for when the connection check is run on a prepared IPA replica machine.

  • -m MASTER, --master=MASTER — the remote master machine address. yeah, you gotta tell her where the master is.
  • -a, --auto-master-check — automatically log in to the master machine and execute the master machine part of the connection check. heads up bestie: the following options for the replica part are only evaluated when this option is set. no -a, no effect. periodt.
  • -r REALM, --realm=REALM — the Kerberos realm name for the IPA server.
  • -k KDC, --kdc=KDC — KDC server address. defaults to MASTER.
  • -p PRINCIPAL, --principal=PRINCIPAL — the authorized Kerberos principal to use to log in to the master machine. defaults to admin.
  • -w PASSWORD, --password=PASSWORD — password for the given principal. and if you don't pass it? she will prompt you for it interactively. she's polite like that. 🫶

👑 MASTER MACHINE OPTIONS 👑

this set of options is used when the connection check is run on a master machine against a running ipa-replica-conncheck(1) on a replica machine.

  • -R REPLICA, --replica=REPLICA — the remote replica machine address.

🌈 COMMON OPTIONS 🌈

  • -c, --check-ca — include in the check also a set of dogtag connection requirements. only needed when the master was installed with Dogtag 9 or lower. iykyk.
  • -h HOSTNAME, --hostname=HOSTNAME — the hostname of this server (FQDN). by default, the result of the getfqdn() call from Python's socket module is used.
  • -d, --debug — print debugging information. for when you need the tea. ☕
  • -q, --quiet — output only errors. minimalism era. 🤫

🦋 EXAMPLES 🦋

  • ipa-replica-conncheck -m master.example.com — run a replica machine connection check against a remote master master.example.com. if the connection to the remote master machine is successful, the program will switch to listening mode and prompt for running the master machine part. that second part checks the connection from master to replica.
  • ipa-replica-conncheck -R replica.example.com — run a master machine connection check part. this is either run automatically by the replica part of the connection check program (when the -a option is set) or manually by the user. and btw, a running ipa-replica-conncheck(1) in a listening mode must already be running on a replica machine. no listener, no check. 💀
  • ipa-replica-conncheck -m master.example.com -a -r EXAMPLE.COM -w password — run a replica-master connection check. in case of a success, switch to listening mode, automatically log to master.example.com in a realm EXAMPLE.COM with a password password, and run the second part of the connection check. full send. 🔥

⭐ EXIT STATUS ⭐

  • 0 if the connection check was successful 🎉
  • 1 if an error occurred 😭

🔥 SEE ALSO 🔥

ngl bestie, if you're seeing a 1 here, go check that firewall first. it's almost always the firewall. 🙈

okay that's the whole page, mwah 💖 this one's from IPA, dated Jun 2 2011 — signed, sealed, slayed. 💅✨

📦 where this page comes from