Andrew Holway wrote: > Actually I'm starting to feel like this is a bug. Managed to get the old > IPA server back up and ran . > > "ipa-server-install --uninstall" > > Which completed successfully and gave the advice: > > Replication agreements with the following IPA masters found: freeipa- > > prod-b-032.cloud.foo.com <http://prod-b-032.cloud.foo.com>. Removing any > replication agreements before > > uninstalling the server is strongly recommended. You can remove replication > > agreements by running the following command on any other IPA master: > > $ ipa-replica-manage del freeipa-prod-a-031.cloud.foo.com > <http://freeipa-prod-a-031.cloud.foo.com> > > > Running this command on the other IPA servers gives the following: > > > [root@freeipa-prod-a-033 centos]# ipa-replica-manage del > freeipa-prod-a-031.cloud.foo.com <http://freeipa-prod-a-031.cloud.foo.com> > > p11-kit: ipa.p11-kit: x-public-key-info: invalid or unsupported attribute > > 'freeipa-prod-a-033.cloud.dcmn.com > <http://freeipa-prod-a-033.cloud.dcmn.com>' has no replication agreement > for 'freeipa-prod-a-031.cloud.foo.com > <http://freeipa-prod-a-031.cloud.foo.com>' > > > I dont see anything in the logs.
Perhaps you had already force deleted the agreement on freeipa-prod-a-033.cloud.dcmn.com after freeipa-prod-a-031.cloud.foo.com went down. rob > > > Thanks, > > > Andrew > > > On 5 November 2015 at 16:58, Andrew Holway <andrew.hol...@gmail.com > <mailto:andrew.hol...@gmail.com>> wrote: > > One of our FreeIPA replicas had its filesystem hosed so we want to > remove it. Can someone show me the sequence of commands to remove a > down replica? > > Thanks, > > Andrew > > > > [root@freeipa-prod-a-033 centos]# ipa-replica-manage list > > p11-kit: ipa.p11-kit: x-public-key-info: invalid or unsupported > attribute > > freeipa-prod-a-031.cloud.foo.com > <http://freeipa-prod-a-031.cloud.foo.com>: master > > freeipa-prod-a-033.cloud.foo.com > <http://freeipa-prod-a-033.cloud.foo.com>: master > > freeipa-prod-b-032.cloud.foo.com > <http://freeipa-prod-b-032.cloud.foo.com>: master > > [root@freeipa-prod-a-033 centos]# ipa-replica-manage del --force > freeipa-prod-a-031.foo.dcmn.com <http://freeipa-prod-a-031.foo.dcmn.com> > > p11-kit: ipa.p11-kit: x-public-key-info: invalid or unsupported > attribute > > 'freeipa-prod-a-033.cloud.foo.com > <http://freeipa-prod-a-033.cloud.foo.com>' has no replication > agreement for 'freeipa-prod-a-031.cloud.dcmn.com > <http://freeipa-prod-a-031.cloud.dcmn.com>' > > > > -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project