Thanks to you both for the tips.  I was able to get into LDAP directly and
remove the entries causing the problems.  Once I had done that, the domain
level change was a breeze!

On Thu, Sep 7, 2017 at 1:25 PM, Rob Crittenden <rcrit...@redhat.com> wrote:

> Kristian Petersen via FreeIPA-users wrote:
> > I am trying to set the domain level for my IPA servers to level 1 from
> > level 0.  When I attempt to run:
> >
> > ipa domainlevel-set 1
> >
> > I get the following error:
> >
> > ipa: ERROR: Domain Level cannot be raised to 1, existing replication
> > conflicts have to be resolved.
> >
> > At the moment, the server has no replicas.  All of them have been
> removed.
> >
> > -bash-4.2$ ipa-replica-manage list
> > ipa1.chem.byu.edu <http://ipa1.chem.byu.edu>: master
> >
> > Any ideas as to why I am still getting this error?
>
> Removing agreements doesn't remove the entries that were created due to
> confict. See this to clean things up:
>
> https://access.redhat.com/documentation/en-us/red_hat_
> directory_server/9.0/html/administration_guide/managing_
> replication-solving_common_replication_conflicts
>
> rob
>



-- 
Kristian Petersen
System Administrator
Dept. of Chemistry and Biochemistry
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to