Stasiek Michalski via FreeIPA-users wrote:
I'd look to see if this user exists on both servers and the 389-ds access logs on both to see what is going on.
The user exists, and access logs tell me:
BIND dn="uid=admin-freeipa2.infra.opensuse.org,ou=people,o=ipaca" method=128 version=3 RESULT err=49 tag=97 nentries=0 etime=0 - Invalid credentials
over and over and over again
Can we see the logs for the creation of the user? The password is set at that point and then immediately used to authenticate.
rob