[Freeipa-users] ipa server-del

2017-05-03 Thread Ian Harding
Is there any way this can be made to work? This server does not exist in real life or seemingly in FreeIPA, but a ghost of it does. ianh@vm-ian-laptop:~$ ipa server-find freeipa-dal.bpt.rocks 1 IPA server matched Server name: freeipa-dal.bpt.rocks

[Freeipa-users] Funny Looking Records

2017-03-23 Thread Ian Harding
-6a5111e6-a4bad0d8-a4feaa1b,cn=freeipa-dal.bpt.rocks+nsuniqueid=f0b9918f-6a5011e6-a4bad0d8-a4feaa1b,cn=masters,cn=ipa,cn=etc,dc=bpt,dc=rocks How can I make them go away? -- Ian Harding IT Director Brown Paper Tickets 1-800-838-3006 ext 7186 http://www.brownpapertickets.com -- Manage your subscription

Re: [Freeipa-users] Manual Cleanup

2017-03-19 Thread Ian Harding
cn=DNS+nsuniqueid=9cfb790e-6a5111e6-a4bad0d8-a4feaa1b,cn=freeipa-dal.bpt.r # DNSKeySync + 9cfb791b-6a5111e6-a4bad0d8-a4feaa1b, freeipa-dal.bpt.rocks + f0b [root@freeipa-sea ianh]# > HTH, > Standa > > On 03/16/2017 07:14 PM, Ian Harding wrote: >> I've made some progress. Bu

[Freeipa-users] Manual Cleanup

2017-03-16 Thread Ian Harding
I've made some progress. But I have one zombie replication agreement to kill, I just don't know the syntax. freeipa-dal.bpt.rocks does not exist. I want all references to it to go away. How would I do that with ldapmodify? Thanks! [root@freeipa-sea slapd-BPT-ROCKS]# ldapsearch -D

[Freeipa-users] DB locks and Clean RUV

2017-03-14 Thread Ian Harding
D: Ran out of db locks getting the next entry. Reduce the batch value and restart. Is there any way to get rid of the cleanallruv tasks that the system thinks are not running? Thanks! - Ian -- Ian Harding IT Director Brown Paper Tickets 1-800-838-3006 ext 7186 http://www.brownpapert

Re: [Freeipa-users] IPA to IPA migration

2017-01-06 Thread Ian Harding
), hosts, groups, hbac rules, etc. I woudln't even mind having to re-enroll them. -- Ian Harding IT Director Brown Paper Tickets 1-800-838-3006 ext 7186 http://www.brownpapertickets.com -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project

[Freeipa-users] Topology -> IPA Servers

2017-01-03 Thread Ian Harding
t "Domain Level cannot be raised to 1, server freeipa-dal.bpt.rocks does not support it." Thanks! -- Ian Harding IT Director Brown Paper Tickets 1-800-838-3006 ext 7186 http://www.brownpapertickets.com -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.

[Freeipa-users] Different Database Generation ID

2016-10-11 Thread Ian Harding
y stop for no reason and restarting the ipa services on freeipa-sea does get them started again. -- Ian Harding IT Director Brown Paper Tickets 1-800-838-3006 ext 7186 http://www.brownpapertickets.com -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/li

Re: [Freeipa-users] Replication issues (was Me Again)

2016-09-21 Thread Ian Harding
On 09/21/2016 11:43 AM, Rob Crittenden wrote: > Ian Harding wrote: >> I used to have a lot of replicas, but like a house of cards, it all came >> crashing down. >> >> I was down to two, that seemed to be replicating, but last few days I've >> noticed that they h

[Freeipa-users] Me Again

2016-09-20 Thread Ian Harding
o do what I describe, along with, I assume, migrating to the official versions of Spacewalk and FreeIPA. Thanks! Ian -- Ian Harding IT Director Brown Paper Tickets 1-800-838-3006 ext 7186 http://www.brownpapertickets.com -- Manage your subscription for the Freeipa-users mailing list: https://ww

Re: [Freeipa-users] Cleaning Up an Unholy Mess

2016-08-29 Thread Ian Harding
On 08/25/2016 03:10 PM, Mark Reynolds wrote: > > > On 08/25/2016 02:04 PM, Ian Harding wrote: >> >> On 08/25/2016 10:41 AM, Rob Crittenden wrote: >>> Ian Harding wrote: >>>> >>>> On 08/24/2016 06:33 PM, Rob Crittenden wrote: >&

Re: [Freeipa-users] Cleaning Up an Unholy Mess

2016-08-25 Thread Ian Harding
On 08/25/2016 10:41 AM, Rob Crittenden wrote: > Ian Harding wrote: >> >> >> On 08/24/2016 06:33 PM, Rob Crittenden wrote: >>> Ian Harding wrote: >>>> I tried to simply uninstall and reinstall freeipa-dal and this >>>> happened. >>

Re: [Freeipa-users] Cleaning Up an Unholy Mess

2016-08-24 Thread Ian Harding
On 08/24/2016 06:33 PM, Rob Crittenden wrote: > Ian Harding wrote: >> I tried to simply uninstall and reinstall freeipa-dal and this happened. >> >> It only had a replication agreement with freeipa-sea >> >> [root@freeipa-dal ianh]# ipa-server-install --uninsta

[Freeipa-users] Cleaning Up an Unholy Mess

2016-08-24 Thread Ian Harding
: ERROR: invalid 'hostname': An IPA master host cannot be deleted or disabled Now what? I'm running out of things that work. -- Ian Harding IT Director Brown Paper Tickets 1-800-838-3006 ext 7186 http://www.brownpapertickets.com -- Manage your subscription for the Freeipa-users mailing list: https

Re: [Freeipa-users] clean-ruv

2016-08-24 Thread Ian Harding
On 08/24/2016 04:43 AM, Ludwig Krispenz wrote: > > On 08/24/2016 01:08 AM, Ian Harding wrote: >> >> On 08/23/2016 03:14 AM, Ludwig Krispenz wrote: >>> On 08/23/2016 11:52 AM, Ian Harding wrote: >>>> Ah. I see. I mixed those up but I see that

Re: [Freeipa-users] clean-ruv

2016-08-23 Thread Ian Harding
ispenz wrote: > looks like you are searching the nstombstone below "o=ipaca", but you > are cleaning ruvs in "dc=bpt,dc=rocks", > > your attrlist_replace error refers to the bpt,rocks backend, so you > should search the tombstone entry ther, then determine which rep

[Freeipa-users] clean-ruv

2016-08-23 Thread Ian Harding
I've followed the procedure in this thread: https://www.redhat.com/archives/freeipa-users/2016-May/msg00043.html and found my list of RUV that don't have an existing replica id. I've tried to remove them like so: [root@seattlenfs ianh]# ldapmodify -D "cn=directory manager" -W -a Enter LDAP

Re: [Freeipa-users] Third Party Certificate

2016-08-03 Thread Ian Harding
On 08/02/2016 08:19 AM, Florence Blanc-Renaud wrote: > On 08/02/2016 03:17 PM, Ian Harding wrote: >> Hello! >> >> I have been using FreeIPA for a while in our network with 6 replicas and >> it's been working great. I seem to have made a wee mistake though and

[Freeipa-users] Deleted Replica Problems

2016-08-03 Thread Ian Harding
I deleted a replica that had a corrupted ldap database and it caused some problems. I'm now getting the dreaded [root@edinburghnfs ianh]# ipa-replica-manage connect freeipa-sea.bpt.rocks Connection unsuccessful: freeipa-sea.bpt.rocks is an IPA Server, but it might be unknown, foreign or

Re: [Freeipa-users] Third Party Certificate

2016-08-02 Thread Ian Harding
YES! Thank you so much. On 08/02/2016 08:19 AM, Florence Blanc-Renaud wrote: > On 08/02/2016 03:17 PM, Ian Harding wrote: >> Hello! >> >> I have been using FreeIPA for a while in our network with 6 replicas and >> it's been working great. I seem to have made a we

[Freeipa-users] Third Party Certificate

2016-08-02 Thread Ian Harding
Hello! I have been using FreeIPA for a while in our network with 6 replicas and it's been working great. I seem to have made a wee mistake though and I'd appreciate some help. I did this: https://www.freeipa.org/page/Using_3rd_part_certificates_for_HTTP/LDAP on one server because I had a new