On 15-11-2024 14:01, Alexander Bokovoy wrote:
On Пят, 15 ліс 2024, Kees Bakker via FreeIPA-users wrote:
Hi,

After I did a "ipa server-del" I was expecting that the SRV and URI
records were cleaned up as well.
But they weren't.  I'm talking about DNS records like
_kerberos.example.com  _kerberos_tcp.example.com _ldap_tcp.example.com
etc

Is this a known issue? Am I expected to cleanup these entries myself?
after a ipa server-del

It does clean up DNS server entries if integrated DNS is enabled:
 - removes master DNS records for the replica
 - removes DNSSEC public keys associated with that replica

If any of those operations failed, you'll get a message returned as a
part of the command. There are two messages:

            self.add_message(
                messages.ServerRemovalWarning(
                    message=_(
                        "Failed to cleanup %(hostname)s DNS entries: "
                        "%(err)s") % dict(hostname=hostname, err=e)))

            self.add_message(
                messages.ServerRemovalWarning(
                    message=_("You may need to manually remove them from the "
                              "tree")))

Well, in my case it didn't cleanup the above mentioned records. There
are still 15 SRV and URI records were the removed server is listed.

The NS record for the deleted server is correctly removed.

The ipa server-del command completed without error.

I don't mind cleaning up manually if that can be done from the
command line.
--
Kees

--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to