Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Rob Crittenden
Nathan wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/02/2013 02:48 PM, Rob Crittenden wrote: Nathan wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/02/2013 01:56 PM, Rob Crittenden wrote: $ ldapsearch -LLL -x -b cn=oldmaster.example.com,cn=masters,cn=ipa,cn=etc,dc

Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Nathan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/02/2013 02:48 PM, Rob Crittenden wrote: > Nathan wrote: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >> >> >> >> On 05/02/2013 01:56 PM, Rob Crittenden wrote: >>> $ ldapsearch -LLL -x -b >>> cn=oldmaster.example.com,cn=masters,cn=ipa,cn

Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Rob Crittenden
Nathan wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/02/2013 01:56 PM, Rob Crittenden wrote: $ ldapsearch -LLL -x -b cn=oldmaster.example.com,cn=masters,cn=ipa,cn=etc,dc=example,dc=com dn Then carefully paste each dn, minus the dn:, in REVERSE order, to: $ ldapdelete -x -D 'cn=

Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Nathan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/02/2013 01:56 PM, Rob Crittenden wrote: > $ ldapsearch -LLL -x -b > cn=oldmaster.example.com,cn=masters,cn=ipa,cn=etc,dc=example,dc=com > dn > > Then carefully paste each dn, minus the dn:, in REVERSE order, to: > > $ ldapdelete -x -D 'cn=Di

Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Rob Crittenden
Nathan wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/02/2013 01:07 PM, Rob Crittenden wrote: Nathan wrote: ipa-replica-manage does not seem to have a --cleanup option... Can you give me more detail about how it's used? --cleanup was introduced in FreeIPA 3.0. It sounds like

Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Nathan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/02/2013 01:07 PM, Rob Crittenden wrote: > Nathan wrote: ipa-replica-manage does not seem to have a --cleanup > option... Can you give me more detail about how it's used? > >> --cleanup was introduced in FreeIPA 3.0. > >> It sounds like you j

Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Rob Crittenden
Nathan wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ipa-replica-manage does not seem to have a --cleanup option... Can you give me more detail about how it's used? --cleanup was introduced in FreeIPA 3.0. It sounds like you just have a masters entry left over in cn=masters,cn=ipa,cn

Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Nathan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ipa-replica-manage does not seem to have a --cleanup option... Can you give me more detail about how it's used? On 05/02/2013 12:07 PM, Petr Viktorin wrote: > On 05/02/2013 05:21 PM, Nathan wrote: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >>

Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Petr Viktorin
On 05/02/2013 05:21 PM, Nathan wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 List still shows caroline1. [root@caroline2 PROD ~]# ipa-replica-manage list caroline0.lafayette.edu: master caroline2.lafayette.edu: master caroline1.lafayette.edu: master - -v does not seem to change the out

Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Nathan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 List still shows caroline1. [root@caroline2 PROD ~]# ipa-replica-manage list caroline0.lafayette.edu: master caroline2.lafayette.edu: master caroline1.lafayette.edu: master - -v does not seem to change the output at all. I even tried moving the - -v

Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Petr Viktorin
On 05/02/2013 04:17 PM, Nathan wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm sorry, I should have mentioned that I've tried that already. Here's the ouput. [root@caroline2 PROD ~]# ipa-replica-manage del --force caroline1.lafayette.edu 'caroline2.lafayette.edu' has no replication agr

Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Nathan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm sorry, I should have mentioned that I've tried that already. Here's the ouput. [root@caroline2 PROD ~]# ipa-replica-manage del --force caroline1.lafayette.edu 'caroline2.lafayette.edu' has no replication agreement for 'caroline1.lafayette.edu' Th

Re: [Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Petr Viktorin
On 05/02/2013 03:49 PM, Lager, Nathan T. wrote: I have an IPA server that i'm rebuilding. It was part of a 3 server replication. That is, three ipa replicas. Caroline0 through 2. I have the server rebuilt, the problem is, it wasn't cleanly removed from the ipa replication in the first place,

[Freeipa-users] Deleting a down ipa master?

2013-05-02 Thread Lager, Nathan T.
I have an IPA server that i'm rebuilding. It was part of a 3 server replication. That is, three ipa replicas. Caroline0 through 2. I have the server rebuilt, the problem is, it wasn't cleanly removed from the ipa replication in the first place, so the other two replicas still think it exist