[Freeipa-users] Re: healthcheck complains about a removed replica

2021-07-13 Thread Rob Crittenden via FreeIPA-users
Rob Crittenden via FreeIPA-users wrote: > Kees Bakker via FreeIPA-users wrote: >> On 13-07-2021 19:47, Kees Bakker via FreeIPA-users wrote: >>> *** EXTERNAL E-MAIL *** >>> >>> >>> On 13-07-2021 17:24, Kees Bakker via FreeIPA-users wrote: On 13-07-2021 17:08, Rob Crittenden wrote: > Kees Ba

[Freeipa-users] Re: healthcheck complains about a removed replica

2021-07-13 Thread Rob Crittenden via FreeIPA-users
Kees Bakker via FreeIPA-users wrote: > On 13-07-2021 19:47, Kees Bakker via FreeIPA-users wrote: >> *** EXTERNAL E-MAIL *** >> >> >> On 13-07-2021 17:24, Kees Bakker via FreeIPA-users wrote: >>> On 13-07-2021 17:08, Rob Crittenden wrote: Kees Bakker wrote: > On 12-07-2021 21:51, Rob Critte

[Freeipa-users] Re: healthcheck complains about a removed replica

2021-07-13 Thread Kees Bakker via FreeIPA-users
On 13-07-2021 19:47, Kees Bakker via FreeIPA-users wrote: *** EXTERNAL E-MAIL *** On 13-07-2021 17:24, Kees Bakker via FreeIPA-users wrote: On 13-07-2021 17:08, Rob Crittenden wrote: Kees Bakker wrote: On 12-07-2021 21:51, Rob Crittenden wrote: Kees Bakker via FreeIPA-users wrote: Hi Flo,

[Freeipa-users] Re: healthcheck complains about a removed replica

2021-07-13 Thread Kees Bakker via FreeIPA-users
On 13-07-2021 17:24, Kees Bakker via FreeIPA-users wrote: On 13-07-2021 17:08, Rob Crittenden wrote: Kees Bakker wrote: On 12-07-2021 21:51, Rob Crittenden wrote: Kees Bakker via FreeIPA-users wrote: Hi Flo, Do you have a hint how I can get to the point where I can execute the pki securitydo

[Freeipa-users] Re: healthcheck complains about a removed replica

2021-07-13 Thread Kees Bakker via FreeIPA-users
On 13-07-2021 17:08, Rob Crittenden wrote: Kees Bakker wrote: On 12-07-2021 21:51, Rob Crittenden wrote: Kees Bakker via FreeIPA-users wrote: Hi Flo, Do you have a hint how I can get to the point where I can execute the pki securitydomain-host-del command? All examples [2] on the Internet are

[Freeipa-users] Re: healthcheck complains about a removed replica

2021-07-13 Thread Rob Crittenden via FreeIPA-users
Kees Bakker wrote: > On 12-07-2021 21:51, Rob Crittenden wrote: >> Kees Bakker via FreeIPA-users wrote: >>> Hi Flo, >>> >>> Do you have a hint how I can get to the point where I can execute >>> the pki securitydomain-host-del command? All examples [2] on the >>> Internet >>> are from the time when

[Freeipa-users] Re: ldap_extended_operation fails on the client

2021-07-13 Thread iulian roman via FreeIPA-users
Indeed, one of the replica had a duplicate nameAlias in the cache. I removed it and it looks ok now. Thank you for the hint. ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@list

[Freeipa-users] ipa-dnskeysyncd DEBUG messages

2021-07-13 Thread Kees Bakker via FreeIPA-users
Hi, On the two CentOS 8 Stream masters (upgraded a few days ago) we now get quite a few DEBUG messages. I haven't seen these before. There is also a WARN - content-sync-plugin. Is this something to be worried about? Jul 13 14:06:56 linge.example.com ipa-dnskeysyncd[283246]: ipaserver.dnssec.s

[Freeipa-users] Re: ldap_extended_operation fails on the client

2021-07-13 Thread Florence Renaud via FreeIPA-users
Hi, a similar issue was already seen in other customer cases, and the advice was to look for an entry with nameAlias: in the cache. The issue was resolved by removing this additional group. HTH, flo On Tue, Jul 13, 2021 at 11:14 AM iulian roman via FreeIPA-users < freeipa-users@lists.fedorahoste

[Freeipa-users] ldap_extended_operation fails on the client

2021-07-13 Thread iulian roman via FreeIPA-users
Hello everybody, In the client logs I get the error bellow when querying AD users: [ipa_s2n_exop_done] (0x0040): ldap_extended_operation result: Time limit exceeded(3), (null). (Tue Jul 13 10:47:46 2021) [sssd[be[ipa.example.com]]] [ipa_s2n_exop_done] (0x0040): ldap_extended_operation failed,