Re: [Freeipa-users] replicas removed, but incorrectly

2016-09-26 Thread Ludwig Krispenz
you should only remove agreements to no longer existing servers, eg where: nsDS5ReplicaHost: kdc01.unix.iriszorg.nl the other one should remain, not sure why it cannot contact the server On 09/26/2016 03:35 PM, Natxo Asenjo wrote: hi, or do I need to remove: dn: cn=cloneAgreement1-kdc03.uni

Re: [Freeipa-users] replicas removed, but incorrectly

2016-09-26 Thread Natxo Asenjo
hi, or do I need to remove: dn: cn=cloneAgreement1-kdc03.unix.iriszorg.nl-pki-tomcat,cn=replica,cn=o\3Dipa ca,cn=mapping tree,cn=config because it has this: nsds5replicaLastUpdateStatus: -1 Unable to acquire replicaLDAP error: Can't co ntact LDAP server nsds5replicaUpdateInProgress: FALSE and

Re: [Freeipa-users] replicas removed, but incorrectly

2016-09-26 Thread Natxo Asenjo
hi, On Mon, Sep 26, 2016 at 3:06 PM, Ludwig Krispenz wrote: > > On 09/26/2016 02:56 PM, Natxo Asenjo wrote: > > > so the command has not been successful in the kdc03. in the dirsrv errors > log I see: > > [26/Sep/2016:14:50:54 +0200] NSMMReplicationPlugin - CleanAllRUV Task (rid > 71): Not al

Re: [Freeipa-users] replicas removed, but incorrectly

2016-09-26 Thread Ludwig Krispenz
On 09/26/2016 02:56 PM, Natxo Asenjo wrote: On Mon, Sep 26, 2016 at 1:54 PM, Natxo Asenjo > wrote: On Mon, Sep 26, 2016 at 1:50 PM, Ludwig Krispenz mailto:lkris...@redhat.com>> wrote: On 09/26/2016 01:36 PM, Natxo Asenjo wrote: And

Re: [Freeipa-users] replicas removed, but incorrectly

2016-09-26 Thread Natxo Asenjo
On Mon, Sep 26, 2016 at 1:54 PM, Natxo Asenjo wrote: > > > > On Mon, Sep 26, 2016 at 1:50 PM, Ludwig Krispenz > wrote: > >> >> On 09/26/2016 01:36 PM, Natxo Asenjo wrote: >> >> And in my example, the replica id would be 66, 96, 71 and 97, correct? >> >> no, I don't think so. you searched 2 times

Re: [Freeipa-users] replicas removed, but incorrectly

2016-09-26 Thread Natxo Asenjo
On Mon, Sep 26, 2016 at 1:50 PM, Ludwig Krispenz wrote: > > On 09/26/2016 01:36 PM, Natxo Asenjo wrote: > > hi, > > I recently upgraded a centos 6.8 realm to centos 7.2 and it almost went > correctly. > > Now I see some errors in /var/log/dirsrv/slapd-INSTANCENAME/errors > > 26/Sep/2016:13:20:15

Re: [Freeipa-users] replicas removed, but incorrectly

2016-09-26 Thread Ludwig Krispenz
On 09/26/2016 01:36 PM, Natxo Asenjo wrote: hi, I recently upgraded a centos 6.8 realm to centos 7.2 and it almost went correctly. Now I see some errors in /var/log/dirsrv/slapd-INSTANCENAME/errors 26/Sep/2016:13:20:15 +0200] attrlist_replace - attr_replace (nsslapd-referral, ldap://kdc03.

[Freeipa-users] replicas removed, but incorrectly

2016-09-26 Thread Natxo Asenjo
hi, I recently upgraded a centos 6.8 realm to centos 7.2 and it almost went correctly. Now I see some errors in /var/log/dirsrv/slapd-INSTANCENAME/errors 26/Sep/2016:13:20:15 +0200] attrlist_replace - attr_replace (nsslapd-referral, ldap://kdc03.unix.iriszorg.nl:389/o%3Dipaca) failed and accord