1.16. Viewing available server roles in the IdM topology using the IdM CLI

• CA server
• DNS server
• Key recovery authority (KRA) server.

Procedure

• To display all CA servers in the topology and the current CA renewal server:

  $ ipa config-show
    ...
    IPA masters: server1.example.com, server2.example.com, server3.example.com
    IPA CA servers: server1.example.com, server2.example.com
    IPA CA renewal master: server1.example.com

• Alternatively, to display a list of roles enabled on a particular server, for example server.example.com:

  $ ipa server-show
  Server name: server.example.com
    ...
    Enabled server roles: CA server, DNS server, KRA server

• Alternatively, use the ipa server-find --servrole command to search for all servers with a particular server role enabled. For example, to search for all CA servers:

  $ ipa server-find --servrole "CA server"
  ---------------------
  2 IPA servers matched
  ---------------------
    Server name: server1.example.com
    ...
  
    Server name: server2.example.com
    ...
  ----------------------------
  Number of entries returned 2
  ----------------------------