Perfect! Thanks for all the help Rob! Jamal
On Wed 14 Feb 2018 at 19:08, Rob Crittenden <rcrit...@redhat.com> wrote: > Jamal Mahmoud wrote: > > Thank you Thierry for your help! > > > > I just deleted all the entries and hey presto! Oxygen is no longer > > lingering around. Except that in my defaultServerList entry, oxygen is > > still there, i have a feeling that is affecting something somewhere, or > > will in the future. Would anyone know how to fix this? > > after running: > > > > ldapsearch -LLL -D "cn=directory manager" -W -b "dc=eggvfx,dc=ie" > > "(objectclass=*)" | grep oxygen > > > > The output is: > > defaultServerList: oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> > > nitrogen.eggvfx.ie <http://nitrogen.eggvfx.ie> lithium.eggvfx.ie > > <http://lithium.eggvfx.ie> > > You can use ldapmodify to drop the oxygen entry. > > defaultServerList is used for some kinds of discovery (DUA profiles). > > rob > > > > > Thanks again for your help! > > Jamal > > > > <http://www.egg.ie/> > > > > > > > > *Jamal Mahmoud* / Pipeline TD > > jamal.mahm...@egg.ie <mailto:jamal.mahm...@egg.ie> > > > > 35 Fitzwilliam Street Upper, Dublin. > > P: +353 1 6345440 > > > > Twitter <https://twitter.com/EggPost> Facebook > > <https://www.facebook.com/egg.post/> LinkedIn > > <http://www.linkedin.com/in/jamalmahmoud> Vimeo > > <https://vimeo.com/user9887735> > > > > > > On 14 February 2018 at 16:20, thierry bordaz <tbor...@redhat.com > > <mailto:tbor...@redhat.com>> wrote: > > > > I think it is okay to do the delete. > > topology plugin is a reader of master container and should take into > > account those changes. Now it may require a restart. > > > > Just for your information I will be out of the office tonight being > > back Feb 23rd > > > > best regards > > thierry > > > > On 02/14/2018 04:25 PM, Jamal Mahmoud wrote: > >> Would it hurt to try running those ldapdelete commands? or would > >> that make it worse? > >> > >> Thanks for your help Thierry, > >> > >> <http://www.egg.ie/> > >> > >> > >> > >> *Jamal Mahmoud* / Pipeline TD > >> jamal.mahm...@egg.ie <mailto:jamal.mahm...@egg.ie> > >> > >> 35 Fitzwilliam Street Upper, Dublin. > >> P: +353 1 6345440 <tel:+353%201%20634%205440> > >> > >> Twitter <https://twitter.com/EggPost> Facebook > >> <https://www.facebook.com/egg.post/> LinkedIn > >> <http://www.linkedin.com/in/jamalmahmoud> Vimeo > >> <https://vimeo.com/user9887735> > >> > >> > >> > >> > >> > >> On 14 February 2018 at 14:56, thierry bordaz <tbor...@redhat.com > >> <mailto:tbor...@redhat.com>> wrote: > >> > >> Hummm... to be honest I have not the skill of support guys to > >> get rid of conflicts in IPA :( > >> > >> Removing the conflicts entries under 'masters' should relax > >> topology plugin to accept deletion of the segments. > >> You may ping again freeipa-users to get more advice how to > >> repair a topology with conflicts entries. > >> > >> We know that we have a former server that is a conflict entry > >> under 'master'. > >> Also that it exists segments to that server, likely because > >> topology plugin hit the same issues than others IPA CLI. > >> > >> On 02/14/2018 03:43 PM, Jamal Mahmoud wrote: > >>> Haha! I almost went ahead and ran those deletes without > >>> thinking! Sick of oxygen at this point! > >>> Okay so I grepped oxygen from that output file and if i'm not > >>> mistaken there are references to it in the topology. > >>> > >>> dn: cn=nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie > >>> <http://nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie > >,cn=domain,cn=topology,cn=ipa,cn= > >>> cn: nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie > >>> <http://nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie> > >>> ipaReplTopoSegmentRightNode: oxygen.eggvfx.ie > >>> <http://oxygen.eggvfx.ie> > >>> dn: cn=nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie > >>> <http://nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie > >,cn=ca,cn=topology,cn=ipa,cn=etc, > >>> cn: nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie > >>> <http://nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie> > >>> ipaReplTopoSegmentRightNode: oxygen.eggvfx.ie > >>> <http://oxygen.eggvfx.ie> > >>> dn: cn=oxygen.eggvfx.ie > >>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=mast > >>> cn: oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> > >>> > >>> > >>> I see that some of the lines have been truncated but you can > >>> see the start of some lines point to segment nodes with > >>> Nitrogen, is it okay still to run this ldapdelete? > >>> > >>> > >>> <http://www.egg.ie/> > >>> > >>> > >>> > >>> *Jamal Mahmoud* / Pipeline TD > >>> jamal.mahm...@egg.ie <mailto:jamal.mahm...@egg.ie> > >>> > >>> 35 Fitzwilliam Street Upper, Dublin. > >>> P: +353 1 6345440 <tel:+353%201%20634%205440> > >>> > >>> Twitter <https://twitter.com/EggPost> Facebook > >>> <https://www.facebook.com/egg.post/> LinkedIn > >>> <http://www.linkedin.com/in/jamalmahmoud> Vimeo > >>> <https://vimeo.com/user9887735> > >>> > >>> > >>> > >>> > >>> > >>> On 14 February 2018 at 14:37, thierry bordaz > >>> <tbor...@redhat.com <mailto:tbor...@redhat.com>> wrote: > >>> > >>> Okay, > >>> > >>> So master 'oxygen' was a conflicts as well as all its > >>> services (NTP, KDC...). > >>> My understanding is that 'oxygen' is no longer part of > >>> the topology. So I think removing all its children and > >>> then the master would solve your issue. > >>> > >>> ldapdelete -D "cn=directory manager" -W > >>> "cn=oxygen.eggvfx.ie > >>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie" > >>> > >>> > >>> ldapdelete -D "cn=directory manager" -W > >>> > "cn=NTP+nsuniqueid=65aeb78a-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie" > >>> > >>> ldapdelete -D "cn=directory manager" -W > >>> > "cn=KDC+nsuniqueid=65aeb78c-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie" > >>> > >>> ldapdelete -D "cn=directory manager" -W > >>> > "cn=KPASSWD+nsuniqueid=65aeb78d-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie" > >>> > >>> ldapdelete -D "cn=directory manager" -W > >>> > "cn=HTTP+nsuniqueid=72cba68b-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie" > >>> > >>> ldapdelete -D "cn=directory manager" -W > >>> > "cn=OTPD+nsuniqueid=72cba68c-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie" > >>> > >>> ldapdelete -D "cn=directory manager" -W > >>> > "cn=KEYS+nsuniqueid=72cba68d-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie" > >>> > >>> But before doing that I would first check if it remains > >>> reference to oxygen somewhere. > >>> > >>> ldapsearch -LLL -D "cn=directory manager" -W -b > >>> "dc=eggvfx,dc=ie" "(objectclass=*)" > /tmp/all_db > >>> > >>> then search for 'oxygen' into /tmp/all_db and check it > >>> appears only in those conflict entries. > >>> > >>> > >>> On 02/14/2018 03:22 PM, Jamal Mahmoud wrote: > >>>> Here it is! If there is anything else don't hesitate to > >>>> ask me! > >>>> > >>>> [root@lithium ~]# ldapsearch -D "cn=directory manager" > >>>> -W -b "cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie" > >>>> "(nsds5ReplConflict=*)" dn > >>>> Enter LDAP Password: > >>>> # extended LDIF > >>>> # > >>>> # LDAPv3 > >>>> # base <cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie> with > >>>> scope subtree > >>>> # filter: (nsds5ReplConflict=*) > >>>> # requesting: dn > >>>> # > >>>> > >>>> # oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > >>>> 562f6f20-04de11e8-a003fb96-902b0a77, masters, ipa, etc, eg > >>>> gvfx.ie <http://gvfx.ie> > >>>> dn: cn=oxygen.eggvfx.ie > >>>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=mast > >>>> ers,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>> > >>>> # NTP + 65aeb78a-04de11e8-a003fb96-902b0a77, > >>>> oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > 562f6f20-04de11 > >>>> e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie > >>>> <http://eggvfx.ie> > >>>> dn: > >>>> cn=NTP+nsuniqueid=65aeb78a-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>>> <http://oxygen.eggvfx.ie>+ > >>>> > > nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eg > >>>> gvfx,dc=ie > >>>> > >>>> # KDC + 65aeb78c-04de11e8-a003fb96-902b0a77, > >>>> oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > 562f6f20-04de11 > >>>> e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie > >>>> <http://eggvfx.ie> > >>>> dn: > >>>> cn=KDC+nsuniqueid=65aeb78c-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>>> <http://oxygen.eggvfx.ie>+ > >>>> > > nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eg > >>>> gvfx,dc=ie > >>>> > >>>> # KPASSWD + 65aeb78d-04de11e8-a003fb96-902b0a77, > >>>> oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + 562f6f20-04 > >>>> de11e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie > >>>> <http://eggvfx.ie> > >>>> dn: > >>>> > cn=KPASSWD+nsuniqueid=65aeb78d-04de11e8-a003fb96-902b0a77,cn=oxygen.eggvfx > >>>> > > .ie+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,d > >>>> c=eggvfx,dc=ie > >>>> > >>>> # HTTP + 72cba68b-04de11e8-a003fb96-902b0a77, > >>>> oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > 562f6f20-04de1 > >>>> 1e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie > >>>> <http://eggvfx.ie> > >>>> dn: > >>>> cn=HTTP+nsuniqueid=72cba68b-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>>> <http://oxygen.eggvfx.ie> > >>>> > > +nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e > >>>> ggvfx,dc=ie > >>>> > >>>> # OTPD + 72cba68c-04de11e8-a003fb96-902b0a77, > >>>> oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > 562f6f20-04de1 > >>>> 1e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie > >>>> <http://eggvfx.ie> > >>>> dn: > >>>> cn=OTPD+nsuniqueid=72cba68c-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>>> <http://oxygen.eggvfx.ie> > >>>> > > +nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e > >>>> ggvfx,dc=ie > >>>> > >>>> # KEYS + 72cba68d-04de11e8-a003fb96-902b0a77, > >>>> oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > 562f6f20-04de1 > >>>> 1e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie > >>>> <http://eggvfx.ie> > >>>> dn: > >>>> cn=KEYS+nsuniqueid=72cba68d-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>>> <http://oxygen.eggvfx.ie> > >>>> > > +nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e > >>>> ggvfx,dc=ie > >>>> > >>>> # search result > >>>> search: 2 > >>>> result: 0 Success > >>>> > >>>> # numResponses: 8 > >>>> # numEntries: 7 > >>>> > >>>> Many Thanks, > >>>> > >>>> <http://www.egg.ie/> > >>>> > >>>> > >>>> > >>>> *Jamal Mahmoud* / Pipeline TD > >>>> jamal.mahm...@egg.ie <mailto:jamal.mahm...@egg.ie> > >>>> > >>>> 35 Fitzwilliam Street Upper, Dublin > >>>> < > https://maps.google.com/?q=35+Fitzwilliam+Street+Upper,+Dublin&entry=gmail&source=g > >. > >>>> P: +353 1 6345440 <tel:+353%201%20634%205440> > >>>> > >>>> Twitter <https://twitter.com/EggPost> Facebook > >>>> <https://www.facebook.com/egg.post/> LinkedIn > >>>> <http://www.linkedin.com/in/jamalmahmoud> Vimeo > >>>> <https://vimeo.com/user9887735> > >>>> > >>>> > >>>> > >>>> > >>>> > >>>> On 14 February 2018 at 14:00, thierry bordaz > >>>> <tbor...@redhat.com <mailto:tbor...@redhat.com>> wrote: > >>>> > >>>> Jamal, > >>>> > >>>> sorry to iterate but I would like to have a complete > >>>> view before deleting entries. > >>>> > >>>> What is the outpout of > >>>> ldapsearch -D "cn=directory manager" -W -b > >>>> "cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie" > >>>> "(nsds5ReplConflict=*)" dn > >>>> > >>>> > >>>> On 02/14/2018 02:43 PM, Jamal Mahmoud wrote: > >>>>> Oh i see! Here is the output from that command: > >>>>> > >>>>> [root@lithium ~]# ldapsearch -D "cn=directory > >>>>> manager" -W -b > >>>>> "cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie" > >>>>> > "(|(objectclass=*)(objectclass=nstombstone)(objectclass=ldapsubentry))" > >>>>> Enter LDAP Password: > >>>>> # extended LDIF > >>>>> # > >>>>> # LDAPv3 > >>>>> # base <cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie> > >>>>> with scope subtree > >>>>> # filter: > >>>>> > (|(objectclass=*)(objectclass=nstombstone)(objectclass=ldapsubentry)) > >>>>> # requesting: ALL > >>>>> # > >>>>> > >>>>> # masters, ipa, etc, eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: top > >>>>> cn: masters > >>>>> > >>>>> # nitrogen.eggvfx.ie <http://nitrogen.eggvfx.ie>, > >>>>> masters, ipa, etc, eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> ipaMaxDomainLevel: 1 > >>>>> ipaMinDomainLevel: 0 > >>>>> ipaReplTopoManagedSuffix: dc=eggvfx,dc=ie > >>>>> ipaReplTopoManagedSuffix: o=ipaca > >>>>> cn: nitrogen.eggvfx.ie <http://nitrogen.eggvfx.ie> > >>>>> objectClass: top > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaReplTopoManagedServer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: ipaSupportedDomainLevelConfig > >>>>> > >>>>> # 4184b79c-efc211e7-a445c156-0137f91d, > >>>>> lithium.eggvfx.ie <http://lithium.eggvfx.ie>, > >>>>> masters, ipa, etc, eg > >>>>> gvfx.ie <http://gvfx.ie> > >>>>> dn: > >>>>> nsuniqueid=4184b79c-efc211e7-a445c156-0137f91d,cn= > lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie>,cn=mas > >>>>> ters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> nstombstonecsn: 5a4b902b001c00070000 > >>>>> nsParentUniqueId: 0ae096b3-9c8a11e7-917dfdf1-4323123d > >>>>> ipaMaxDomainLevel: 1 > >>>>> ipaMinDomainLevel: 0 > >>>>> ipaReplTopoManagedSuffix: dc=eggvfx,dc=ie > >>>>> cn: lithium.eggvfx.ie <http://lithium.eggvfx.ie> > >>>>> objectClass: top > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaReplTopoManagedServer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: ipaSupportedDomainLevelConfig > >>>>> objectClass: nsTombstone > >>>>> > >>>>> # NTP, nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=NTP,cn=nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> cn: NTP > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 45 > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> > >>>>> # KDC, nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=KDC,cn=nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> cn: KDC > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 10 > >>>>> ipaConfigString: kdcProxyEnabled > >>>>> ipaConfigString: pkinitEnabled > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> > >>>>> # KPASSWD, nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=KPASSWD,cn=nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> cn: KPASSWD > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 20 > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> > >>>>> # HTTP, nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=HTTP,cn=nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> cn: HTTP > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 40 > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> > >>>>> # OTPD, nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=OTPD,cn=nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> cn: OTPD > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 80 > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> > >>>>> # KEYS, nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=KEYS,cn=nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> cn: KEYS > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 41 > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> > >>>>> # CA, nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=CA,cn=nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> cn: CA > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 50 > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> > >>>>> # DNS, nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=DNS,cn=nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> cn: DNS > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 30 > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> > >>>>> # DNSKeySync, nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=DNSKeySync,cn=nitrogen.eggvfx.ie > >>>>> <http://nitrogen.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc= > >>>>> ie > >>>>> cn: DNSKeySync > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 110 > >>>>> ipaConfigString: dnssecVersion 1 > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> > >>>>> # lithium.eggvfx.ie <http://lithium.eggvfx.ie>, > >>>>> masters, ipa, etc, eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: top > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaReplTopoManagedServer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: ipaSupportedDomainLevelConfig > >>>>> cn: lithium.eggvfx.ie <http://lithium.eggvfx.ie> > >>>>> ipaReplTopoManagedSuffix: dc=eggvfx,dc=ie > >>>>> ipaReplTopoManagedSuffix: o=ipaca > >>>>> ipaMinDomainLevel: 0 > >>>>> ipaMaxDomainLevel: 1 > >>>>> > >>>>> # NTP, lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=NTP,cn=lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 45 > >>>>> cn: NTP > >>>>> > >>>>> # KDC, lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=KDC,cn=lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 10 > >>>>> ipaConfigString: kdcProxyEnabled > >>>>> ipaConfigString: pkinitEnabled > >>>>> cn: KDC > >>>>> > >>>>> # KPASSWD, lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=KPASSWD,cn=lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 20 > >>>>> cn: KPASSWD > >>>>> > >>>>> # HTTP, lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=HTTP,cn=lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 40 > >>>>> cn: HTTP > >>>>> > >>>>> # OTPD, lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=OTPD,cn=lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 80 > >>>>> cn: OTPD > >>>>> > >>>>> # KEYS, lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=KEYS,cn=lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 41 > >>>>> cn: KEYS > >>>>> > >>>>> # CA, lithium.eggvfx.ie <http://lithium.eggvfx.ie>, > >>>>> masters, ipa, etc, eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=CA,cn=lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 50 > >>>>> ipaConfigString: caRenewalMaster > >>>>> cn: CA > >>>>> > >>>>> # DNS, lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=DNS,cn=lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 30 > >>>>> cn: DNS > >>>>> > >>>>> # DNSKeySync, lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie>, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=DNSKeySync,cn=lithium.eggvfx.ie > >>>>> <http://lithium.eggvfx.ie > >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=i > >>>>> e > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 110 > >>>>> ipaConfigString: dnssecVersion 1 > >>>>> cn: DNSKeySync > >>>>> > >>>>> # oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > >>>>> 562f6f20-04de11e8-a003fb96-902b0a77, masters, ipa, > >>>>> etc, eg > >>>>> gvfx.ie <http://gvfx.ie> > >>>>> dn: cn=oxygen.eggvfx.ie > >>>>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=mast > >>>>> ers,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: top > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaReplTopoManagedServer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: ipaSupportedDomainLevelConfig > >>>>> cn: oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> > >>>>> ipaReplTopoManagedSuffix: dc=eggvfx,dc=ie > >>>>> ipaReplTopoManagedSuffix: o=ipaca > >>>>> ipaMinDomainLevel: 0 > >>>>> ipaMaxDomainLevel: 1 > >>>>> > >>>>> # NTP + 65aeb78a-04de11e8-a003fb96-902b0a77, > >>>>> oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > >>>>> 562f6f20-04de11 > >>>>> e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie > >>>>> <http://eggvfx.ie> > >>>>> dn: > >>>>> > cn=NTP+nsuniqueid=65aeb78a-04de11e8-a003fb96-902b0a77,cn=oxygen.eggvfx.ie > >>>>> <http://oxygen.eggvfx.ie>+ > >>>>> > > nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eg > >>>>> gvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 45 > >>>>> cn: NTP > >>>>> > >>>>> # KDC + 65aeb78c-04de11e8-a003fb96-902b0a77, > >>>>> oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > >>>>> 562f6f20-04de11 > >>>>> e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie > >>>>> <http://eggvfx.ie> > >>>>> dn: > >>>>> > cn=KDC+nsuniqueid=65aeb78c-04de11e8-a003fb96-902b0a77,cn=oxygen.eggvfx.ie > >>>>> <http://oxygen.eggvfx.ie>+ > >>>>> > > nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eg > >>>>> gvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 10 > >>>>> ipaConfigString: kdcProxyEnabled > >>>>> ipaConfigString: pkinitEnabled > >>>>> cn: KDC > >>>>> > >>>>> # KPASSWD + 65aeb78d-04de11e8-a003fb96-902b0a77, > >>>>> oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > >>>>> 562f6f20-04 > >>>>> de11e8-a003fb96-902b0a77, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: > >>>>> > cn=KPASSWD+nsuniqueid=65aeb78d-04de11e8-a003fb96-902b0a77,cn=oxygen.eggvfx > >>>>> > > .ie+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,d > >>>>> c=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 20 > >>>>> cn: KPASSWD > >>>>> > >>>>> # HTTP + 72cba68b-04de11e8-a003fb96-902b0a77, > >>>>> oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > >>>>> 562f6f20-04de1 > >>>>> 1e8-a003fb96-902b0a77, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: > >>>>> > cn=HTTP+nsuniqueid=72cba68b-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>>>> <http://oxygen.eggvfx.ie> > >>>>> > > +nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e > >>>>> ggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 40 > >>>>> cn: HTTP > >>>>> > >>>>> # OTPD + 72cba68c-04de11e8-a003fb96-902b0a77, > >>>>> oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > >>>>> 562f6f20-04de1 > >>>>> 1e8-a003fb96-902b0a77, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: > >>>>> > cn=OTPD+nsuniqueid=72cba68c-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>>>> <http://oxygen.eggvfx.ie> > >>>>> > > +nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e > >>>>> ggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 80 > >>>>> cn: OTPD > >>>>> > >>>>> # KEYS + 72cba68d-04de11e8-a003fb96-902b0a77, > >>>>> oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > >>>>> 562f6f20-04de1 > >>>>> 1e8-a003fb96-902b0a77, masters, ipa, etc, > >>>>> eggvfx.ie <http://eggvfx.ie> > >>>>> dn: > >>>>> > cn=KEYS+nsuniqueid=72cba68d-04de11e8-a003fb96-902b0a77,cn= > oxygen.eggvfx.ie > >>>>> <http://oxygen.eggvfx.ie> > >>>>> > > +nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e > >>>>> ggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 41 > >>>>> cn: KEYS > >>>>> > >>>>> # CA, oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > >>>>> 562f6f20-04de11e8-a003fb96-902b0a77, masters, ipa, > etc > >>>>> , eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=CA,cn=oxygen.eggvfx.ie > >>>>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,c > >>>>> n=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 50 > >>>>> cn: CA > >>>>> > >>>>> # DNS, oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + > >>>>> 562f6f20-04de11e8-a003fb96-902b0a77, masters, ipa, et > >>>>> c, eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=DNS,cn=oxygen.eggvfx.ie > >>>>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77, > >>>>> cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 30 > >>>>> cn: DNS > >>>>> > >>>>> # DNSKeySync, oxygen.eggvfx.ie > >>>>> <http://oxygen.eggvfx.ie> + > >>>>> 562f6f20-04de11e8-a003fb96-902b0a77, masters, > >>>>> ipa, etc, eggvfx.ie <http://eggvfx.ie> > >>>>> dn: cn=DNSKeySync,cn=oxygen.eggvfx.ie > >>>>> <http://oxygen.eggvfx.ie > >+nsuniqueid=562f6f20-04de11e8-a003fb96-90 > >>>>> 2b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie > >>>>> objectClass: nsContainer > >>>>> objectClass: ipaConfigObject > >>>>> objectClass: top > >>>>> ipaConfigString: enabledService > >>>>> ipaConfigString: startOrder 110 > >>>>> ipaConfigString: dnssecVersion 1 > >>>>> cn: DNSKeySync > >>>>> > >>>>> # search result > >>>>> search: 2 > >>>>> -- Many Thanks, Jamal Mahmoud
_______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org