Alexander Bokovoy via FreeIPA-users wrote: > On ti, 13 kesä 2017, Chris Dagdigian via FreeIPA-users wrote: >> Hi folks, >> >> Fixing a topology and replication issue caused my IDM infrastructure >> to forget about roughly 30 enrolled client hosts. >> >> Though this would be trivial to fix via an ansible playbook that runs >> the IPA client install command again with the "--force-join" argument. > Force join is for the case when you want ipa-join utility to repeat join > process on the server side. This just ignores the fact that host object > does exist in LDAP and allows to continue to regenerate a keytab. > > It does not mean ipa-client-install would reconfigure the client side. > > If you want really to re-do install, run 'ipa-client-install --uninstall > --force' and then 'ipa-client-install --force-join'. > > The check for already installed client cannot be overridden right now.
Right but this is exactly the opposite of what the man page and the v3 design document states [1], hence the need for a bug. rob [1] http://www.freeipa.org/page/V3/Forced_client_re-enrollment >> >> Manpage and docs suggest this should work. Any tips or help appreciated! >> >> Software: >> >> ipa-common-4.4.0-14.el7.centos.7.noarch >> ipa-client-common-4.4.0-14.el7.centos.7.noarch >> ipa-client-4.4.0-14.el7.centos.7.x86_64 >> >> >> Error when I try to re-enroll the client: >> >> [root@deawilldpp06 centos]# >> [root@deawilldpp06 centos]# ipa-client-install --force-join >> --mkhomedir --unattended --password=XXXX --principal YYYY --server >> deawilidmp001.ZZZZ.org --domain WWWWW.org >> >> IPA client is already configured on this system. >> If you want to reinstall the IPA client, uninstall it first using >> 'ipa-client-install --uninstall'. >> [root@deawilldpp06 centos]# >> [root@deawilldpp06 centos]# >> >> >> >> _______________________________________________ >> FreeIPA-users mailing list -- [email protected] >> To unsubscribe send an email to >> [email protected] > _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
