> > from an earlier post it looks like they are from the o=ipaca > backend, did you clean the ruvs there ?
we have only done a 'normal' cleanruv... How can I clean them there? > > to know which are the correct current rids for this backend you > could do on each active server a search for > ... -b "cn=config" "(&(objectclass=nsds5replica)( > nsDS5ReplicaRoot=o=ipaca))" nsDS5ReplicaId > > then you could search > > ldapsearch -h <hostname> -D "cn=Directory Manager" -W -b "o=ipaca" > "(&(objectclass=nstombstone)(nsUniqueId=ffffffff-ffffffff-ffffffff- > ffffffff))" > to see what you have in the ruv and eventually clean them > On 06/19/2015 01:48 PM, Christoph Kaminski wrote: > Ludwig Krispenz <lkris...@redhat.com> schrieb am 19.06.2015 13:23:43: > > > > > > the first search is for the replication agreements and they keep > > > info about the consumer ruv, used in replication session. you cannot > > > modify these, but they are maintained in the dse.ldif, you could > > > edit the dse.ldif when the server is stopped. > > > > big thx, we try it and I let you know if it works! > > > Greetz
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project