On Mon, Jun 21, 2021, at 10:55 AM, Rob Crittenden wrote:
> Bret Wortman via FreeIPA-users wrote:
> > On Mon, Jun 21, 2021, at 9:03 AM, Bret Wortman via FreeIPA-users wrote:
> >> On Fri, Jun 18, 2021, at 1:32 PM, Rob Crittenden wrote:
> >>> Awesome, glad to hear it. When you complete the migration don't forget
> >>> to move over the DNA settings, CRL generation and other stuff.
> >>
> >> Is this documented somewhere? I'd hate to miss a step.
> >
> > Also, my new host, ipa2, is claiming to already have a replication
> > agreement with ipa2c7 but I'm not seeing it:
> >
> > [root@ipa2c7 ~]# ipa-replica-manage list
> > ipa1.our.net: master
> > ipa2c7.our.net: master
> > [root@ipa2c7 ~]# ipa-replica-manage list-ruv
> > Directory Manager password:
> >
> > unable to decode: {replica 13} 60b907570001000d0000 60b907570001000d0000
> > unable to decode: {replica 14} 60b923030002000e0000 60b923030002000e0000
> > unable to decode: {replica 21} 60cb27ed000600150000 60cb27ed000600150000
> > unable to decode: {replica 24} 60cc5b11000400180000 60cc5b11000400180000
> > unable to decode: {replica 17} 60be13a5000000110000 60be13c9000700110000
> > unable to decode: {replica 18} 60bf4aec000000120000 60c07065000200120000
> > unable to decode: {replica 5}
> > Replica Update Vectors:
> > ipa2c7.our.net:389: 26
> > ipa1.our.net:389: 4
> > Certificate Server Replica Update Vectors:
> > ipa2c7.our.net:389: 91
> > ipa1.our.net:389: 96
> > [root@ipa2c7 ~]#
> >
> > Could it be one of those "unable to decode" replicas and if so how do I get
> > rid of those?
>
> Try ipa-replica-manage clean-dangling-ruv
>
> and/or ipa-replica-manage clean-ruv <replica id>
I did the clean-dangling-ruv and it got me to this point. When I try to
clean-ruv one of these IDs:
[root@ipa2c7 ~]# ipa-replica-manage clean-ruv 13
Directory Manager password:
unable to decode: {replica 13} 60b907570001000d0000 60b907570001000d0000
unable to decode: {replica 14} 60b923030002000e0000 60b923030002000e0000
unable to decode: {replica 21} 60cb27ed000600150000 60cb27ed000600150000
unable to decode: {replica 24} 60cc5b11000400180000 60cc5b11000400180000
unable to decode: {replica 17} 60be13a5000000110000 60be13c9000700110000
unable to decode: {replica 18} 60bf4aec000000120000 60c07065000200120000
unable to decode: {replica 5}
Replica ID 13 not found
[root@ipa2c7 ~]#
And it does the same for each.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
