Hi
On 08/04/2015 06:14 PM, Janelle wrote:
On 8/4/15 9:06 AM, Ludwig Krispenz wrote:
On 08/04/2015 05:40 PM, Rob Crittenden wrote:
Janelle wrote:
Hello again,
Just to keep your Tuesday fun, is this possible:
16 servers.
ipa-replica-manage list <---- shows all 16
1 of the servers broke a couple of weeks ago and was removed with
"clean-ruv" but STILL shows up in the replica list, but not a single
master has a replica agreement with it, so there is no way to
delete it
since trying to do "ipa-replica-manage del" with any options,
including
force, from ANY servers says there is no replica agreement. How is
this
possible and how do I get rid of the phantom replica? and I did try
--cleanup and it took it, but did nothing. And there is NOTHING in the
logs??
To further clarify, it is not a CA either, and never was.
Very confusing indeed. I just like to keep the developers on their
toes.
:-)
don't know if I want to know the answer, but is it contained in the
ruvs ?
No. That is why I am baffled. I want to re-add the server to help with
loading, but obviously if it still shows up - so weird. Looks like
ldapmodify is going to be required. I don't even have any strange
CSN/replicas that can't be decoded in list-ruv
you probably did run into this issue:
https://fedorahosted.org/freeipa/ticket/5019
ioa-replica-manage del failed to delete the master because it did not
remove all services before. If you want to do it by ldapmodify, check
what services are there below the master entry and remove these befor
removing the master
~J
list shows the those entries in cn=masters,cn=ipa,cn=etc,$SUFFIX. It
doesn't show agreements or topology.
What output do you see when --cleanup is used?
You should check the 389-ds access log after this is run as well to
see what searches and mods were attempted.
rob
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
