[Freeipa-users] Re: Cannot get rid of a replica/agreement

2023-07-21 Thread Stephan Voeth via FreeIPA-users
hey everyone, i had a similar issue and it took me a lot of time to figure it out. I could not a remove a single replica because the topology plugin i could not remove a non-leave server. But it was a simple leave server. After trying a lot of stuff, i found out, that some replication

[Freeipa-users] Re: Cannot get rid of a replica/agreement

2021-07-09 Thread Rob Crittenden via FreeIPA-users
lejeczek via FreeIPA-users wrote: > > > On 06/07/2021 17:23, Florence Renaud wrote: >> Hi >> so there are replication conflicts in the LDAP database. >> >> To find the conflicting entries, run the following commands on each >> server: >> export BASEDN= >> ldapsearch -D "cn=Directory Manager" -W

[Freeipa-users] Re: Cannot get rid of a replica/agreement

2021-07-09 Thread lejeczek via FreeIPA-users
On 06/07/2021 17:23, Florence Renaud wrote: Hi so there are replication conflicts in the LDAP database. To find the conflicting entries, run the following commands on each server: export BASEDN= ldapsearch -D "cn=Directory Manager" -W -b $BASEDN

[Freeipa-users] Re: Cannot get rid of a replica/agreement

2021-07-06 Thread Florence Renaud via FreeIPA-users
Hi so there are replication conflicts in the LDAP database. To find the conflicting entries, run the following commands on each server: export BASEDN= ldapsearch -D "cn=Directory Manager" -W -b $BASEDN "(&(objectClass=ldapSubEntry)(nsds5ReplConflict=*))" \* nsds5ReplConflict And then follow the

[Freeipa-users] Re: Cannot get rid of a replica/agreement

2021-07-06 Thread lejeczek via FreeIPA-users
On 06/07/2021 07:27, Florence Renaud wrote: Hi, is the topology at domain level 1 or domain level 0? # kinit admin # ipa domainlevel-get If the level is 1, the right command in order to remove a replica + ignore topology disconnect issues is # kinit admin # ipa server-del

[Freeipa-users] Re: Cannot get rid of a replica/agreement

2021-07-06 Thread Florence Renaud via FreeIPA-users
Hi, is the topology at domain level 1 or domain level 0? # kinit admin # ipa domainlevel-get If the level is 1, the right command in order to remove a replica + ignore topology disconnect issues is # kinit admin # ipa server-del --ignore-topology-disconnect The error "not allowed on non-leaf