Jamal Mahmoud via FreeIPA-users wrote: > Hi Rob, > > Just wondering if you had time to look at this issue for me? Still stuck > in a state of limbo with this IDM and i have run out of options. Any > help in resolving this issue would be appreciated.
A few more questions. What is the output of: ipa domainlevel-get Can you show the full output of ipa-replica-manage del oxygen... --force --cleanup And on what master are you running that? rob > > Many Thanks, > Jamal > > > On 1 February 2018 at 17:04, Jamal Mahmoud <jamal.mahm...@egg.ie > <mailto:jamal.mahm...@egg.ie>> wrote: > > Sorry about the lack of clarification Rob! > > I have 3 servers, all running CentOS 7.4, FreeIPA version 4.5.0. the > hostnames are lithium, nitrogen and the recently deceased oxygen. > all are masters under the same Realm which is EGGVFX.IE > <http://EGGVFX.IE> > > The "server not found" error is exactly what shows when i try to > delete the server from command line or the Web UI. > > When i run ipa-replica-manage list -v `hostname` this is the output > from the servers: > > Lithium Output: > root@lithium# ipa-replica-manage list -v `hostname` > nitrogen.eggvfx.ie <http://nitrogen.eggvfx.ie>: replica > last init status: 0 Total update succeeded > last init ended: 2018-02-01 10:51:14+00:00 > last update status: Error (0) Replica acquired successfully: > Incremental update succeeded > last update ended: 2018-02-01 16:24:37+00:00 > > Nitrogen Output: > root@nitrogen# ipa-replica-manage list -v `hostname` > lithium.eggvfx.ie <http://lithium.eggvfx.ie>: replica > last init status: None > last init ended: 1970-01-01 00:00:00+00:00 > last update status: Error (0) Replica acquired successfully: > Incremental update succeeded > last update ended: 2018-02-01 10:48:18+00:00 > oxygen.eggvfx.ie <http://oxygen.eggvfx.ie>: replica > last init status: None > last init ended: 1970-01-01 00:00:00+00:00 > last update status: Error (-1) Problem connecting to replica - > LDAP error: Can't contact LDAP server (connection error) > last update ended: 1970-01-01 00:00:00+00:00 > > There is no entries for oxygen in host-find. I hope this helps clear > the story a bit for you. > > <http://www.egg.ie/> > > > > *Jamal Mahmoud* / Pipeline TD > jamal.mahm...@egg.ie <mailto:jamal.mahm...@egg.ie> > > 35 Fitzwilliam Street Upper, Dublin. > P: +353 1 6345440 <tel:+353%201%20634%205440> > > Twitter <https://twitter.com/EggPost> Facebook > <https://www.facebook.com/egg.post/> LinkedIn > <http://www.linkedin.com/in/jamalmahmoud> Vimeo > <https://vimeo.com/user9887735> > > > On 1 February 2018 at 15:30, Rob Crittenden <rcrit...@redhat.com > <mailto:rcrit...@redhat.com>> wrote: > > Jamal Mahmoud via FreeIPA-users wrote: > > I'm having strange issues with removing one of my freeIPA masters, I > > managed to mess up the deletion process and my system seems to be > stuck > > in a state of limbo, my current setup is 3 servers ( 1 has been > > decommissioned) that all share the CA/Domain responsibilities. When > i > > run the command .> > > *ipa-replica-manage list* > > * > > *it produces 3 servers as active masters, when this is not > true as i > > have uninstalled ipa-server on one. Trying to delete it through that > > command has given me no luck, even using *--force* and > *--cleanup* does > > not work. the same error output appears: > > > > *oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> > <http://oxygen.eggvfx.ie>: server not found* > > I think we need more information. What version of IPA is this, what > distribution? > > Is the above error the exact error you are getting? > > As I understand it you ran ipa-server-install --uninstall and > THEN tried > to delete the master? > > What does ipa-replica-manage list -v `hostname` show on one of > the other > masters? > > > * > > * > > I'm not very good with ldap tools but after running > > > > *ldapsearch -x * > > * > > *there is a reference to the oxygen server still sitting in > there, it > > seems that the dirty entry is still hanging around my system, i'm > > wondering if there is any way to resolve this? > > > > ldapsearch output: > > *defaultServerList: oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> > <http://oxygen.eggvfx.ie> > > nitrogen.eggvfx.ie <http://nitrogen.eggvfx.ie> > <http://nitrogen.eggvfx.ie> lithium.eggvfx.ie > <http://lithium.eggvfx.ie> > > <http://lithium.eggvfx.ie>* > > An anonymous LDAP search won't show much. > > Does it show up in host-find? > > rob > > > * > > Looking at the topology graph in the web ui i can see that there are > > still ties between one of my servers and oxygen. It will also not > allow > > me to delete the server ties ( error: *Server is unwilling to > perform: > > Removal of Segment disconnects topology.Deletion not > allowed.)* nor will > > the ui allow me to delete the IPA server (*oxygen.eggvfx.ie > <http://oxygen.eggvfx.ie> > > <http://oxygen.eggvfx.ie>: server not found*) > > > > Any help is greatly appreciated, > > > > Many Thanks, > > Jamal Mahmoud > > > > > > > > _______________________________________________ > > FreeIPA-users mailing list -- > freeipa-users@lists.fedorahosted.org > <mailto:freeipa-users@lists.fedorahosted.org> > > To unsubscribe send an email to > freeipa-users-le...@lists.fedorahosted.org > <mailto:freeipa-users-le...@lists.fedorahosted.org> > > > > > > > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
