Hi Thierry, On 01/26/17 16:55, thierry bordaz wrote: > > > Those entries are managed entries and it is not possible to delete them from > direct ldap command. > A solution proposed by Ludwig is not first make them unmanaged: > > cn=ipaservers+nsuniqueid=109be304-ccd911e6-a5b3d0c8-d8da17db,cn=ng,cn=alt,dc=example,dc=de > changetype: modify > modify: objectclass > delete: mepManagedEntry > > cn=ipaservers+nsuniqueid=109be304-ccd911e6-a5b3d0c8-d8da17db,cn=ng,cn=alt,dc=example,dc=de > changetype: modify > modify: objectclass > delete: mepManagedEntry > > Then retry to delete them. > It should work for the first one but unsure it will succeed for the second > one. >
I am not sure about this "managed" thing. This sounds like some kind of external influence. How can I make sure that removing these entries doesn't break something? Is the original entry managed in the same way as the duplicate? Regards Harri -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project