Apologies, I wasn't sure what to send. server1 is running CentOS and server2 is running AlmaLinux. The version difference between them on IPA is just a patch release. The goal here is to rebuild a replica onto AlmaLinux and then once replication is working, rebuild the first server on Alma to get off of CentOS. Our IPA domain is domain.ipa, whereas the AD domain is domain.net.
However upon examining the error log I found something interesting. [23/Jul/2026:11:00:32.560105108 -0500] - DEBUG - NSMMReplicationPlugin - repl5_inc_run - agmt="cn=meToserver2.domain.net" (server2:389): State: backoff -> backoff [23/Jul/2026:11:00:32.562473849 -0500] - DEBUG - NSMMReplicationPlugin - conn_connect - agmt="cn=meToserver2.domain.net" (server2:389) - Trying non-secure slapi_ldap_init_ext [23/Jul/2026:11:00:32.566745136 -0500] - DEBUG - NSMMReplicationPlugin - conn_connect - agmt="cn=meToserver2.domain.net" (server2:389) - binddn = , passwd = [23/Jul/2026:11:00:32.570054561 -0500] - DEBUG - NSMMReplicationPlugin - bind_and_check_pwp - agmt="cn=meToserver2.domain.net" (server2:389) - Replication bind with GSSAPI auth failed: LDAP error -1 (Can't contact LDAP server) () [23/Jul/2026:11:00:32.571897661 -0500] - DEBUG - NSMMReplicationPlugin - close_connection_internal - agmt="cn=meToserver2.domain.net" (server2:389) - Disconnected from the consumer [23/Jul/2026:11:00:32.573983717 -0500] - DEBUG - NSMMReplicationPlugin - conn_start_linger -agmt="cn=meToserver2.domain.net" (server2:389) - Beginning linger on the connection [23/Jul/2026:11:00:32.576017166 -0500] - DEBUG - NSMMReplicationPlugin - conn_start_linger - agmt="cn=meToserver2.domain.net" (server2:389) - No linger on the closed conn [23/Jul/2026:11:00:32.578566536 -0500] - DEBUG - NSMMReplicationPlugin - repl5_inc_run - agmt="cn=meToserver2.domain.net" (server2:389): Replication session backing off for 3 seconds I was getting these errors even after removing server2 from the IPA topology and host list. Even verifying that it's gone with server-del shows no such host: [root@server1 ~]# ipa server-del server2.domain.net Removing server2.domain.net from replication topology, please wait... ipa: ERROR: server2.domain.net: server not found [root@server1 ~]# ipa server-del server2.domain.net --force Removing server2.domain.net from replication topology, please wait... ipa: WARNING: Forcing removal of server2.domain.net ipa: WARNING: Failed to cleanup server2.domain.net DNS entries: no matching entry found ipa: WARNING: You may need to manually remove them from the tree ipa: WARNING: Server has already been deleted ---------------------------------------- Deleted IPA server "server2.domain.net" ---------------------------------------- -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
