Perfect! Thanks for all the help Rob!

Jamal

On Wed 14 Feb 2018 at 19:08, Rob Crittenden <rcrit...@redhat.com> wrote:

> Jamal Mahmoud wrote:
> > Thank you Thierry for your help!
> >
> > I just deleted all the entries and hey presto! Oxygen is no longer
> > lingering around. Except that in my defaultServerList entry, oxygen is
> > still there, i have a feeling that is affecting something somewhere, or
> > will in the future. Would anyone know how to fix this?
> > after running:
> >
> > ldapsearch -LLL -D "cn=directory manager" -W -b "dc=eggvfx,dc=ie"
> > "(objectclass=*)" | grep oxygen
> >
> > The output is:
> > defaultServerList: oxygen.eggvfx.ie <http://oxygen.eggvfx.ie>
> > nitrogen.eggvfx.ie <http://nitrogen.eggvfx.ie> lithium.eggvfx.ie
> > <http://lithium.eggvfx.ie>
>
> You can use ldapmodify to drop the oxygen entry.
>
> defaultServerList is used for some kinds of discovery (DUA profiles).
>
> rob
>
> >
> > Thanks again for your help!
> > Jamal
> >
> > <http://www.egg.ie/>
> >
> >
> >
> > *Jamal Mahmoud* / Pipeline TD
> > jamal.mahm...@egg.ie <mailto:jamal.mahm...@egg.ie>
> >
> > 35 Fitzwilliam Street Upper, Dublin.
> > P: +353 1 6345440
> >
> > Twitter  <https://twitter.com/EggPost> Facebook
> > <https://www.facebook.com/egg.post/> LinkedIn
> > <http://www.linkedin.com/in/jamalmahmoud> Vimeo
> > <https://vimeo.com/user9887735>
> >
> >
> > On 14 February 2018 at 16:20, thierry bordaz <tbor...@redhat.com
> > <mailto:tbor...@redhat.com>> wrote:
> >
> >     I think it is okay to do the delete.
> >     topology plugin is a reader of master container and should take into
> >     account those changes. Now it may require a restart.
> >
> >     Just for your information I will be out of the office tonight being
> >     back Feb 23rd
> >
> >     best regards
> >     thierry
> >
> >     On 02/14/2018 04:25 PM, Jamal Mahmoud wrote:
> >>     Would it hurt to try running those ldapdelete commands? or would
> >>     that make it worse?
> >>
> >>     Thanks for your help Thierry,
> >>
> >>     <http://www.egg.ie/>
> >>
> >>
> >>
> >>     *Jamal Mahmoud* / Pipeline TD
> >>     jamal.mahm...@egg.ie <mailto:jamal.mahm...@egg.ie>
> >>
> >>     35 Fitzwilliam Street Upper, Dublin.
> >>     P: +353 1 6345440 <tel:+353%201%20634%205440>
> >>
> >>     Twitter  <https://twitter.com/EggPost> Facebook
> >>     <https://www.facebook.com/egg.post/> LinkedIn
> >>     <http://www.linkedin.com/in/jamalmahmoud> Vimeo
> >>     <https://vimeo.com/user9887735>
> >>
> >>
> >>
> >>
> >>
> >>     On 14 February 2018 at 14:56, thierry bordaz <tbor...@redhat.com
> >>     <mailto:tbor...@redhat.com>> wrote:
> >>
> >>         Hummm... to be honest I have not the skill of support guys to
> >>         get rid of conflicts in IPA :(
> >>
> >>         Removing the conflicts entries under 'masters' should relax
> >>         topology plugin to accept deletion of the segments.
> >>         You may ping again freeipa-users to get more advice how to
> >>         repair a topology with conflicts entries.
> >>
> >>         We know that we have a former server that is a conflict entry
> >>         under 'master'.
> >>         Also that it exists segments to that server, likely because
> >>         topology plugin hit the same issues than others IPA CLI.
> >>
> >>         On 02/14/2018 03:43 PM, Jamal Mahmoud wrote:
> >>>         Haha! I almost went ahead and ran those deletes without
> >>>         thinking! Sick of oxygen at this point!
> >>>         Okay so I grepped oxygen from that output file and if i'm not
> >>>         mistaken there are references to it in the topology.
> >>>
> >>>         dn: cn=nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie
> >>>         <http://nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie
> >,cn=domain,cn=topology,cn=ipa,cn=
> >>>         cn: nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie
> >>>         <http://nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie>
> >>>         ipaReplTopoSegmentRightNode: oxygen.eggvfx.ie
> >>>         <http://oxygen.eggvfx.ie>
> >>>         dn: cn=nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie
> >>>         <http://nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie
> >,cn=ca,cn=topology,cn=ipa,cn=etc,
> >>>         cn: nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie
> >>>         <http://nitrogen.eggvfx.ie-to-oxygen.eggvfx.ie>
> >>>         ipaReplTopoSegmentRightNode: oxygen.eggvfx.ie
> >>>         <http://oxygen.eggvfx.ie>
> >>>         dn: cn=oxygen.eggvfx.ie
> >>>         <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=mast
> >>>         cn: oxygen.eggvfx.ie <http://oxygen.eggvfx.ie>
> >>>
> >>>
> >>>         I see that some of the lines have been truncated but you can
> >>>         see the start of some lines point to segment nodes with
> >>>         Nitrogen, is it okay still to run this ldapdelete?
> >>>
> >>>
> >>>         <http://www.egg.ie/>
> >>>
> >>>
> >>>
> >>>         *Jamal Mahmoud* / Pipeline TD
> >>>         jamal.mahm...@egg.ie <mailto:jamal.mahm...@egg.ie>
> >>>
> >>>         35 Fitzwilliam Street Upper, Dublin.
> >>>         P: +353 1 6345440 <tel:+353%201%20634%205440>
> >>>
> >>>         Twitter  <https://twitter.com/EggPost> Facebook
> >>>         <https://www.facebook.com/egg.post/> LinkedIn
> >>>         <http://www.linkedin.com/in/jamalmahmoud> Vimeo
> >>>         <https://vimeo.com/user9887735>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>         On 14 February 2018 at 14:37, thierry bordaz
> >>>         <tbor...@redhat.com <mailto:tbor...@redhat.com>> wrote:
> >>>
> >>>             Okay,
> >>>
> >>>             So master 'oxygen' was a conflicts as well as all its
> >>>             services (NTP, KDC...).
> >>>             My understanding is that 'oxygen' is no longer part of
> >>>             the topology. So I think removing all its children and
> >>>             then the master would solve your issue.
> >>>
> >>>                 ldapdelete -D "cn=directory manager" -W
> >>>                 "cn=oxygen.eggvfx.ie
> >>>                 <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
> >>>
> >>>
> >>>                 ldapdelete -D "cn=directory manager" -W
> >>>
>  "cn=NTP+nsuniqueid=65aeb78a-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>                 <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
> >>>
> >>>                 ldapdelete -D "cn=directory manager" -W
> >>>
>  "cn=KDC+nsuniqueid=65aeb78c-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>                 <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
> >>>
> >>>                 ldapdelete -D "cn=directory manager" -W
> >>>
>  "cn=KPASSWD+nsuniqueid=65aeb78d-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>                 <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
> >>>
> >>>                 ldapdelete -D "cn=directory manager" -W
> >>>
>  "cn=HTTP+nsuniqueid=72cba68b-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>                 <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
> >>>
> >>>                 ldapdelete -D "cn=directory manager" -W
> >>>
>  "cn=OTPD+nsuniqueid=72cba68c-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>                 <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
> >>>
> >>>                 ldapdelete -D "cn=directory manager" -W
> >>>
>  "cn=KEYS+nsuniqueid=72cba68d-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>                 <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
> >>>
> >>>             But before doing that I would first check if it remains
> >>>             reference to oxygen somewhere.
> >>>
> >>>                 ldapsearch -LLL -D "cn=directory manager" -W -b
> >>>                 "dc=eggvfx,dc=ie" "(objectclass=*)" > /tmp/all_db
> >>>
> >>>             then search for 'oxygen' into /tmp/all_db and check it
> >>>             appears only in those conflict entries.
> >>>
> >>>
> >>>             On 02/14/2018 03:22 PM, Jamal Mahmoud wrote:
> >>>>             Here it is! If there is anything else don't hesitate to
> >>>>             ask me!
> >>>>
> >>>>             [root@lithium ~]# ldapsearch -D "cn=directory manager"
> >>>>             -W -b "cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
> >>>>             "(nsds5ReplConflict=*)" dn
> >>>>             Enter LDAP Password:
> >>>>             # extended LDIF
> >>>>             #
> >>>>             # LDAPv3
> >>>>             # base <cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie> with
> >>>>             scope subtree
> >>>>             # filter: (nsds5ReplConflict=*)
> >>>>             # requesting: dn
> >>>>             #
> >>>>
> >>>>             # oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> >>>>             562f6f20-04de11e8-a003fb96-902b0a77, masters, ipa, etc, eg
> >>>>              gvfx.ie <http://gvfx.ie>
> >>>>             dn: cn=oxygen.eggvfx.ie
> >>>>             <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=mast
> >>>>              ers,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>
> >>>>             # NTP + 65aeb78a-04de11e8-a003fb96-902b0a77,
> >>>>             oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> 562f6f20-04de11
> >>>>              e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
> >>>>             <http://eggvfx.ie>
> >>>>             dn:
> >>>>             cn=NTP+nsuniqueid=65aeb78a-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>>             <http://oxygen.eggvfx.ie>+
> >>>>
>   
> nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eg
> >>>>              gvfx,dc=ie
> >>>>
> >>>>             # KDC + 65aeb78c-04de11e8-a003fb96-902b0a77,
> >>>>             oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> 562f6f20-04de11
> >>>>              e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
> >>>>             <http://eggvfx.ie>
> >>>>             dn:
> >>>>             cn=KDC+nsuniqueid=65aeb78c-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>>             <http://oxygen.eggvfx.ie>+
> >>>>
>   
> nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eg
> >>>>              gvfx,dc=ie
> >>>>
> >>>>             # KPASSWD + 65aeb78d-04de11e8-a003fb96-902b0a77,
> >>>>             oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> + 562f6f20-04
> >>>>              de11e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
> >>>>             <http://eggvfx.ie>
> >>>>             dn:
> >>>>
>  cn=KPASSWD+nsuniqueid=65aeb78d-04de11e8-a003fb96-902b0a77,cn=oxygen.eggvfx
> >>>>
>   
> .ie+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,d
> >>>>              c=eggvfx,dc=ie
> >>>>
> >>>>             # HTTP + 72cba68b-04de11e8-a003fb96-902b0a77,
> >>>>             oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> 562f6f20-04de1
> >>>>              1e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
> >>>>             <http://eggvfx.ie>
> >>>>             dn:
> >>>>             cn=HTTP+nsuniqueid=72cba68b-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>>             <http://oxygen.eggvfx.ie>
> >>>>
>   
> +nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e
> >>>>              ggvfx,dc=ie
> >>>>
> >>>>             # OTPD + 72cba68c-04de11e8-a003fb96-902b0a77,
> >>>>             oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> 562f6f20-04de1
> >>>>              1e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
> >>>>             <http://eggvfx.ie>
> >>>>             dn:
> >>>>             cn=OTPD+nsuniqueid=72cba68c-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>>             <http://oxygen.eggvfx.ie>
> >>>>
>   
> +nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e
> >>>>              ggvfx,dc=ie
> >>>>
> >>>>             # KEYS + 72cba68d-04de11e8-a003fb96-902b0a77,
> >>>>             oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> 562f6f20-04de1
> >>>>              1e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
> >>>>             <http://eggvfx.ie>
> >>>>             dn:
> >>>>             cn=KEYS+nsuniqueid=72cba68d-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>>             <http://oxygen.eggvfx.ie>
> >>>>
>   
> +nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e
> >>>>              ggvfx,dc=ie
> >>>>
> >>>>             # search result
> >>>>             search: 2
> >>>>             result: 0 Success
> >>>>
> >>>>             # numResponses: 8
> >>>>             # numEntries: 7
> >>>>
> >>>>             Many Thanks,
> >>>>
> >>>>             <http://www.egg.ie/>
> >>>>
> >>>>
> >>>>
> >>>>             *Jamal Mahmoud* / Pipeline TD
> >>>>             jamal.mahm...@egg.ie <mailto:jamal.mahm...@egg.ie>
> >>>>
> >>>>             35 Fitzwilliam Street Upper, Dublin
> >>>>             <
> https://maps.google.com/?q=35+Fitzwilliam+Street+Upper,+Dublin&entry=gmail&source=g
> >.
> >>>>             P: +353 1 6345440 <tel:+353%201%20634%205440>
> >>>>
> >>>>             Twitter  <https://twitter.com/EggPost> Facebook
> >>>>             <https://www.facebook.com/egg.post/> LinkedIn
> >>>>             <http://www.linkedin.com/in/jamalmahmoud> Vimeo
> >>>>             <https://vimeo.com/user9887735>
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>             On 14 February 2018 at 14:00, thierry bordaz
> >>>>             <tbor...@redhat.com <mailto:tbor...@redhat.com>> wrote:
> >>>>
> >>>>                 Jamal,
> >>>>
> >>>>                 sorry to iterate but I would like to have a complete
> >>>>                 view before deleting entries.
> >>>>
> >>>>                 What is the outpout of
> >>>>                 ldapsearch -D "cn=directory manager" -W -b
> >>>>                 "cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
> >>>>                 "(nsds5ReplConflict=*)" dn
> >>>>
> >>>>
> >>>>                 On 02/14/2018 02:43 PM, Jamal Mahmoud wrote:
> >>>>>                 Oh i see! Here is the output from that command:
> >>>>>
> >>>>>                 [root@lithium ~]# ldapsearch -D "cn=directory
> >>>>>                 manager" -W -b
> >>>>>                 "cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie"
> >>>>>
>  "(|(objectclass=*)(objectclass=nstombstone)(objectclass=ldapsubentry))"
> >>>>>                 Enter LDAP Password:
> >>>>>                 # extended LDIF
> >>>>>                 #
> >>>>>                 # LDAPv3
> >>>>>                 # base <cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie>
> >>>>>                 with scope subtree
> >>>>>                 # filter:
> >>>>>
>  (|(objectclass=*)(objectclass=nstombstone)(objectclass=ldapsubentry))
> >>>>>                 # requesting: ALL
> >>>>>                 #
> >>>>>
> >>>>>                 # masters, ipa, etc, eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: top
> >>>>>                 cn: masters
> >>>>>
> >>>>>                 # nitrogen.eggvfx.ie <http://nitrogen.eggvfx.ie>,
> >>>>>                 masters, ipa, etc, eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 ipaMaxDomainLevel: 1
> >>>>>                 ipaMinDomainLevel: 0
> >>>>>                 ipaReplTopoManagedSuffix: dc=eggvfx,dc=ie
> >>>>>                 ipaReplTopoManagedSuffix: o=ipaca
> >>>>>                 cn: nitrogen.eggvfx.ie <http://nitrogen.eggvfx.ie>
> >>>>>                 objectClass: top
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaReplTopoManagedServer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: ipaSupportedDomainLevelConfig
> >>>>>
> >>>>>                 # 4184b79c-efc211e7-a445c156-0137f91d,
> >>>>>                 lithium.eggvfx.ie <http://lithium.eggvfx.ie>,
> >>>>>                 masters, ipa, etc, eg
> >>>>>                  gvfx.ie <http://gvfx.ie>
> >>>>>                 dn:
> >>>>>                 nsuniqueid=4184b79c-efc211e7-a445c156-0137f91d,cn=
> lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie>,cn=mas
> >>>>>                  ters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 nstombstonecsn: 5a4b902b001c00070000
> >>>>>                 nsParentUniqueId: 0ae096b3-9c8a11e7-917dfdf1-4323123d
> >>>>>                 ipaMaxDomainLevel: 1
> >>>>>                 ipaMinDomainLevel: 0
> >>>>>                 ipaReplTopoManagedSuffix: dc=eggvfx,dc=ie
> >>>>>                 cn: lithium.eggvfx.ie <http://lithium.eggvfx.ie>
> >>>>>                 objectClass: top
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaReplTopoManagedServer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: ipaSupportedDomainLevelConfig
> >>>>>                 objectClass: nsTombstone
> >>>>>
> >>>>>                 # NTP, nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=NTP,cn=nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 cn: NTP
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 45
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>
> >>>>>                 # KDC, nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=KDC,cn=nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 cn: KDC
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 10
> >>>>>                 ipaConfigString: kdcProxyEnabled
> >>>>>                 ipaConfigString: pkinitEnabled
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>
> >>>>>                 # KPASSWD, nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=KPASSWD,cn=nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 cn: KPASSWD
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 20
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>
> >>>>>                 # HTTP, nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=HTTP,cn=nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 cn: HTTP
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 40
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>
> >>>>>                 # OTPD, nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=OTPD,cn=nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 cn: OTPD
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 80
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>
> >>>>>                 # KEYS, nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=KEYS,cn=nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 cn: KEYS
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 41
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>
> >>>>>                 # CA, nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=CA,cn=nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 cn: CA
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 50
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>
> >>>>>                 # DNS, nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=DNS,cn=nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 cn: DNS
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 30
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>
> >>>>>                 # DNSKeySync, nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=DNSKeySync,cn=nitrogen.eggvfx.ie
> >>>>>                 <http://nitrogen.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=
> >>>>>                  ie
> >>>>>                 cn: DNSKeySync
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 110
> >>>>>                 ipaConfigString: dnssecVersion 1
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>
> >>>>>                 # lithium.eggvfx.ie <http://lithium.eggvfx.ie>,
> >>>>>                 masters, ipa, etc, eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: top
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaReplTopoManagedServer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: ipaSupportedDomainLevelConfig
> >>>>>                 cn: lithium.eggvfx.ie <http://lithium.eggvfx.ie>
> >>>>>                 ipaReplTopoManagedSuffix: dc=eggvfx,dc=ie
> >>>>>                 ipaReplTopoManagedSuffix: o=ipaca
> >>>>>                 ipaMinDomainLevel: 0
> >>>>>                 ipaMaxDomainLevel: 1
> >>>>>
> >>>>>                 # NTP, lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=NTP,cn=lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 45
> >>>>>                 cn: NTP
> >>>>>
> >>>>>                 # KDC, lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=KDC,cn=lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 10
> >>>>>                 ipaConfigString: kdcProxyEnabled
> >>>>>                 ipaConfigString: pkinitEnabled
> >>>>>                 cn: KDC
> >>>>>
> >>>>>                 # KPASSWD, lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=KPASSWD,cn=lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 20
> >>>>>                 cn: KPASSWD
> >>>>>
> >>>>>                 # HTTP, lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=HTTP,cn=lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 40
> >>>>>                 cn: HTTP
> >>>>>
> >>>>>                 # OTPD, lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=OTPD,cn=lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 80
> >>>>>                 cn: OTPD
> >>>>>
> >>>>>                 # KEYS, lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=KEYS,cn=lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 41
> >>>>>                 cn: KEYS
> >>>>>
> >>>>>                 # CA, lithium.eggvfx.ie <http://lithium.eggvfx.ie>,
> >>>>>                 masters, ipa, etc, eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=CA,cn=lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 50
> >>>>>                 ipaConfigString: caRenewalMaster
> >>>>>                 cn: CA
> >>>>>
> >>>>>                 # DNS, lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=DNS,cn=lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 30
> >>>>>                 cn: DNS
> >>>>>
> >>>>>                 # DNSKeySync, lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie>, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=DNSKeySync,cn=lithium.eggvfx.ie
> >>>>>                 <http://lithium.eggvfx.ie
> >,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=i
> >>>>>                  e
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 110
> >>>>>                 ipaConfigString: dnssecVersion 1
> >>>>>                 cn: DNSKeySync
> >>>>>
> >>>>>                 # oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> >>>>>                 562f6f20-04de11e8-a003fb96-902b0a77, masters, ipa,
> >>>>>                 etc, eg
> >>>>>                  gvfx.ie <http://gvfx.ie>
> >>>>>                 dn: cn=oxygen.eggvfx.ie
> >>>>>                 <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=mast
> >>>>>                  ers,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: top
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaReplTopoManagedServer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: ipaSupportedDomainLevelConfig
> >>>>>                 cn: oxygen.eggvfx.ie <http://oxygen.eggvfx.ie>
> >>>>>                 ipaReplTopoManagedSuffix: dc=eggvfx,dc=ie
> >>>>>                 ipaReplTopoManagedSuffix: o=ipaca
> >>>>>                 ipaMinDomainLevel: 0
> >>>>>                 ipaMaxDomainLevel: 1
> >>>>>
> >>>>>                 # NTP + 65aeb78a-04de11e8-a003fb96-902b0a77,
> >>>>>                 oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> >>>>>                 562f6f20-04de11
> >>>>>                  e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
> >>>>>                 <http://eggvfx.ie>
> >>>>>                 dn:
> >>>>>
>  cn=NTP+nsuniqueid=65aeb78a-04de11e8-a003fb96-902b0a77,cn=oxygen.eggvfx.ie
> >>>>>                 <http://oxygen.eggvfx.ie>+
> >>>>>
>   
> nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eg
> >>>>>                  gvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 45
> >>>>>                 cn: NTP
> >>>>>
> >>>>>                 # KDC + 65aeb78c-04de11e8-a003fb96-902b0a77,
> >>>>>                 oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> >>>>>                 562f6f20-04de11
> >>>>>                  e8-a003fb96-902b0a77, masters, ipa, etc, eggvfx.ie
> >>>>>                 <http://eggvfx.ie>
> >>>>>                 dn:
> >>>>>
>  cn=KDC+nsuniqueid=65aeb78c-04de11e8-a003fb96-902b0a77,cn=oxygen.eggvfx.ie
> >>>>>                 <http://oxygen.eggvfx.ie>+
> >>>>>
>   
> nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=eg
> >>>>>                  gvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 10
> >>>>>                 ipaConfigString: kdcProxyEnabled
> >>>>>                 ipaConfigString: pkinitEnabled
> >>>>>                 cn: KDC
> >>>>>
> >>>>>                 # KPASSWD + 65aeb78d-04de11e8-a003fb96-902b0a77,
> >>>>>                 oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> >>>>>                 562f6f20-04
> >>>>>                  de11e8-a003fb96-902b0a77, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn:
> >>>>>
>  cn=KPASSWD+nsuniqueid=65aeb78d-04de11e8-a003fb96-902b0a77,cn=oxygen.eggvfx
> >>>>>
>   
> .ie+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,d
> >>>>>                  c=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 20
> >>>>>                 cn: KPASSWD
> >>>>>
> >>>>>                 # HTTP + 72cba68b-04de11e8-a003fb96-902b0a77,
> >>>>>                 oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> >>>>>                 562f6f20-04de1
> >>>>>                  1e8-a003fb96-902b0a77, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn:
> >>>>>
>  cn=HTTP+nsuniqueid=72cba68b-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>>>                 <http://oxygen.eggvfx.ie>
> >>>>>
>   
> +nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e
> >>>>>                  ggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 40
> >>>>>                 cn: HTTP
> >>>>>
> >>>>>                 # OTPD + 72cba68c-04de11e8-a003fb96-902b0a77,
> >>>>>                 oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> >>>>>                 562f6f20-04de1
> >>>>>                  1e8-a003fb96-902b0a77, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn:
> >>>>>
>  cn=OTPD+nsuniqueid=72cba68c-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>>>                 <http://oxygen.eggvfx.ie>
> >>>>>
>   
> +nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e
> >>>>>                  ggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 80
> >>>>>                 cn: OTPD
> >>>>>
> >>>>>                 # KEYS + 72cba68d-04de11e8-a003fb96-902b0a77,
> >>>>>                 oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> >>>>>                 562f6f20-04de1
> >>>>>                  1e8-a003fb96-902b0a77, masters, ipa, etc,
> >>>>>                 eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn:
> >>>>>
>  cn=KEYS+nsuniqueid=72cba68d-04de11e8-a003fb96-902b0a77,cn=
> oxygen.eggvfx.ie
> >>>>>                 <http://oxygen.eggvfx.ie>
> >>>>>
>   
> +nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,cn=masters,cn=ipa,cn=etc,dc=e
> >>>>>                  ggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 41
> >>>>>                 cn: KEYS
> >>>>>
> >>>>>                 # CA, oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> >>>>>                 562f6f20-04de11e8-a003fb96-902b0a77, masters, ipa,
> etc
> >>>>>                  , eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=CA,cn=oxygen.eggvfx.ie
> >>>>>                 <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,c
> >>>>>                  n=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 50
> >>>>>                 cn: CA
> >>>>>
> >>>>>                 # DNS, oxygen.eggvfx.ie <http://oxygen.eggvfx.ie> +
> >>>>>                 562f6f20-04de11e8-a003fb96-902b0a77, masters, ipa, et
> >>>>>                  c, eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=DNS,cn=oxygen.eggvfx.ie
> >>>>>                 <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-902b0a77,
> >>>>>                  cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 30
> >>>>>                 cn: DNS
> >>>>>
> >>>>>                 # DNSKeySync, oxygen.eggvfx.ie
> >>>>>                 <http://oxygen.eggvfx.ie> +
> >>>>>                 562f6f20-04de11e8-a003fb96-902b0a77, masters,
> >>>>>                  ipa, etc, eggvfx.ie <http://eggvfx.ie>
> >>>>>                 dn: cn=DNSKeySync,cn=oxygen.eggvfx.ie
> >>>>>                 <http://oxygen.eggvfx.ie
> >+nsuniqueid=562f6f20-04de11e8-a003fb96-90
> >>>>>                  2b0a77,cn=masters,cn=ipa,cn=etc,dc=eggvfx,dc=ie
> >>>>>                 objectClass: nsContainer
> >>>>>                 objectClass: ipaConfigObject
> >>>>>                 objectClass: top
> >>>>>                 ipaConfigString: enabledService
> >>>>>                 ipaConfigString: startOrder 110
> >>>>>                 ipaConfigString: dnssecVersion 1
> >>>>>                 cn: DNSKeySync
> >>>>>
> >>>>>                 # search result
> >>>>>                 search: 2
> >>>>>

-- 
Many Thanks,
Jamal Mahmoud
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to