Bret Wortman wrote: > So I started removing ipa2c7 this morning but am not getting very far... > > [root@ipa1 httpd]# ipa-replica-manage del ipa2c7.our.net --force > Connection to 'ipa2c7.our.net' failed: > Forcing removal of ipa2c7.our.net > Skipping calculation to determine if one or more masters would be orphaned. > Deleting replication agreements between ipa2c7.our.net and ipa1.our.net, > ipa2.our.net, ipa3.our.net > Failed to get list of agreements from 'ipa2c7.our.net': > Forcing removal on 'ipa1.our.net' > Any DNA range on 'ipa2c7.our.net' will be lost > Deleted replication agreement from 'ipa1.our.net' to 'ipa2c7.our.net' > Failed to determine agreement type for 'ipa2.our.net': > Unable to remove replication agreement for ipa2c7.our.net from ipa2.our.net. > Failed to determine agreement type for 'ipa3.our.net': > Unable to remove replication agreement for ipa2c7.our.net from ipa3.our.net. > Background task created to clean replication data. This may take a while. > This may be safely interrupted with Ctrl+C > : > ^C > Wait for task interrupted. It will continue to run in the background > Failed to cleanup ipa2c7.our.net entries: Not allowed on non-leaf entry > You may need to manually remove them from the tree > Failed to cleanup ipa2c7.our.net DNS entries: no matching entry found > You may need to manually remove them from the tree > [root@ipa1 httpd]# ipa-replica-manage list > ipa2.our.net: master > ipa3.our.net: master > ipa1.our.net: master > ipa2c7.our.net: master > > Any suggestions for other ways to remove the replica so I can remove the host > and its DNS entries and then see what crud is left behind in LDAP?
I'd probably start by exporting to ldif and using simple grep on the data and in /etc/dirsrv/slapd-DOMAIN/dse.ldif to find occurences Then use something like Apache Studio or ldapmodify/ldapdelete to do the removal. rob > > _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
