Re: [Freeipa-users] EXTERNAL: Re: Can't delete group because it states it's not found

2015-04-15 Thread Joseph, Matthew (EXP)
I was able to get the group modified and deleted with your commands Rob.
Thank you very much for the help.

Matt

-Original Message-
From: Rob Crittenden [mailto:rcrit...@redhat.com] 
Sent: Tuesday, April 14, 2015 3:16 PM
To: Joseph, Matthew (EXP); freeipa-users@redhat.com
Subject: Re: EXTERNAL: Re: [Freeipa-users] Can't delete group because it states 
it's not found

Joseph, Matthew (EXP) wrote:
 I tried to do the following command;
 Ldapdelete -D cn=Directory Manager -h server_name -p 389 
 cn=nsuniqueid_random_set_of_numbers,cn=groups,cn=accounts,dc=domain,dc=ca
 And I get the ldap_delete: no such object

Maybe this will help:
https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Managing_Replication-Solving_Common_Replication_Conflicts.html

I can't see what you're seeing so it's hard to get more precise.

rob

 
 Matt
 
 -Original Message-
 From: Rob Crittenden [mailto:rcrit...@redhat.com] 
 Sent: Tuesday, April 14, 2015 2:32 PM
 To: Joseph, Matthew (EXP); freeipa-users@redhat.com
 Subject: Re: EXTERNAL: Re: [Freeipa-users] Can't delete group because it 
 states it's not found
 
 Joseph, Matthew (EXP) wrote:
 Hey Rob,

 So I did the following command;

 Ldapdelete -D cn=Directory Manager -h server_name -p 389 
 cn=group_name,cn=groups,cn=accounts,dc=domain,dc=ca and it comes back with 
 the following;
 Ldap_delete: No such object

 I also tried replacing the group_name with the nsuniqueid and still the same 
 results.
 
 I'd need more details on what you did. You already know the group by
 it's name doesn't exist otherwise IPA would have been able to delete it.
 
 The point is to use the --all --raw flags to get the actual DN of the
 group entry and delete that.
 
 rob
 

 Matt

 -Original Message-
 From: Rob Crittenden [mailto:rcrit...@redhat.com] 
 Sent: Tuesday, April 14, 2015 12:01 PM
 To: Joseph, Matthew (EXP); freeipa-users@redhat.com
 Subject: EXTERNAL: Re: [Freeipa-users] Can't delete group because it states 
 it's not found

 Joseph, Matthew (EXP) wrote:
 Hello,

  

 I'm trying to delete a group in IdM but when I do a ipa group-del
 group it states the following;

 Ipa: ERROR: group: group not found

  

 I do an ipa group-find and it displays the group with the current memebers.

  

 I look in the WebgUI and I can see the group in there but it has no
 information. If I try to view the group or delete it from there it again
 states that the group is not found.

  

 Anyone see this before?

 Run ipa group-show --all --raw groupname and look at the dn value. It
 may be a replication conflict entry. You'd need to delete that manually
 using something like ldapdelete.

 rob

 


-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] EXTERNAL: Re: Can't delete group because it states it's not found

2015-04-14 Thread Joseph, Matthew (EXP)
Hey Rob,

It couldn't find the group when I did your command. I replaced show with find 
and was able to find the dn number.
I can use the ldapdelete command to delete the entry right?

Thanks,

Matt

-Original Message-
From: Rob Crittenden [mailto:rcrit...@redhat.com] 
Sent: Tuesday, April 14, 2015 12:01 PM
To: Joseph, Matthew (EXP); freeipa-users@redhat.com
Subject: EXTERNAL: Re: [Freeipa-users] Can't delete group because it states 
it's not found

Joseph, Matthew (EXP) wrote:
 Hello,
 
  
 
 I'm trying to delete a group in IdM but when I do a ipa group-del
 group it states the following;
 
 Ipa: ERROR: group: group not found
 
  
 
 I do an ipa group-find and it displays the group with the current memebers.
 
  
 
 I look in the WebgUI and I can see the group in there but it has no
 information. If I try to view the group or delete it from there it again
 states that the group is not found.
 
  
 
 Anyone see this before?

Run ipa group-show --all --raw groupname and look at the dn value. It
may be a replication conflict entry. You'd need to delete that manually
using something like ldapdelete.

rob


-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] EXTERNAL: Re: Can't delete group because it states it's not found

2015-04-14 Thread Rob Crittenden
Joseph, Matthew (EXP) wrote:
 Hey Rob,
 
 So I did the following command;
 
 Ldapdelete -D cn=Directory Manager -h server_name -p 389 
 cn=group_name,cn=groups,cn=accounts,dc=domain,dc=ca and it comes back with 
 the following;
 Ldap_delete: No such object
 
 I also tried replacing the group_name with the nsuniqueid and still the same 
 results.

I'd need more details on what you did. You already know the group by
it's name doesn't exist otherwise IPA would have been able to delete it.

The point is to use the --all --raw flags to get the actual DN of the
group entry and delete that.

rob

 
 Matt
 
 -Original Message-
 From: Rob Crittenden [mailto:rcrit...@redhat.com] 
 Sent: Tuesday, April 14, 2015 12:01 PM
 To: Joseph, Matthew (EXP); freeipa-users@redhat.com
 Subject: EXTERNAL: Re: [Freeipa-users] Can't delete group because it states 
 it's not found
 
 Joseph, Matthew (EXP) wrote:
 Hello,

  

 I'm trying to delete a group in IdM but when I do a ipa group-del
 group it states the following;

 Ipa: ERROR: group: group not found

  

 I do an ipa group-find and it displays the group with the current memebers.

  

 I look in the WebgUI and I can see the group in there but it has no
 information. If I try to view the group or delete it from there it again
 states that the group is not found.

  

 Anyone see this before?
 
 Run ipa group-show --all --raw groupname and look at the dn value. It
 may be a replication conflict entry. You'd need to delete that manually
 using something like ldapdelete.
 
 rob
 

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] EXTERNAL: Re: Can't delete group because it states it's not found

2015-04-14 Thread Joseph, Matthew (EXP)
Hey Rob,

So I'm trying to delete this group but I can't seem to find an example.
Would you be able to provide an example for me? Should I be telling the command 
the nsuniqueid or the sn=groupname or the ipauniqueid?

Thanks,

Matt

-Original Message-
From: Rob Crittenden [mailto:rcrit...@redhat.com] 
Sent: Tuesday, April 14, 2015 12:01 PM
To: Joseph, Matthew (EXP); freeipa-users@redhat.com
Subject: EXTERNAL: Re: [Freeipa-users] Can't delete group because it states 
it's not found

Joseph, Matthew (EXP) wrote:
 Hello,
 
  
 
 I'm trying to delete a group in IdM but when I do a ipa group-del
 group it states the following;
 
 Ipa: ERROR: group: group not found
 
  
 
 I do an ipa group-find and it displays the group with the current memebers.
 
  
 
 I look in the WebgUI and I can see the group in there but it has no
 information. If I try to view the group or delete it from there it again
 states that the group is not found.
 
  
 
 Anyone see this before?

Run ipa group-show --all --raw groupname and look at the dn value. It
may be a replication conflict entry. You'd need to delete that manually
using something like ldapdelete.

rob


-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] EXTERNAL: Re: Can't delete group because it states it's not found

2015-04-14 Thread Joseph, Matthew (EXP)
Hey Rob,

So I did the following command;

Ldapdelete -D cn=Directory Manager -h server_name -p 389 
cn=group_name,cn=groups,cn=accounts,dc=domain,dc=ca and it comes back with 
the following;
Ldap_delete: No such object

I also tried replacing the group_name with the nsuniqueid and still the same 
results.

Matt

-Original Message-
From: Rob Crittenden [mailto:rcrit...@redhat.com] 
Sent: Tuesday, April 14, 2015 12:01 PM
To: Joseph, Matthew (EXP); freeipa-users@redhat.com
Subject: EXTERNAL: Re: [Freeipa-users] Can't delete group because it states 
it's not found

Joseph, Matthew (EXP) wrote:
 Hello,
 
  
 
 I'm trying to delete a group in IdM but when I do a ipa group-del
 group it states the following;
 
 Ipa: ERROR: group: group not found
 
  
 
 I do an ipa group-find and it displays the group with the current memebers.
 
  
 
 I look in the WebgUI and I can see the group in there but it has no
 information. If I try to view the group or delete it from there it again
 states that the group is not found.
 
  
 
 Anyone see this before?

Run ipa group-show --all --raw groupname and look at the dn value. It
may be a replication conflict entry. You'd need to delete that manually
using something like ldapdelete.

rob


-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] EXTERNAL: Re: Can't delete group because it states it's not found

2015-04-14 Thread Joseph, Matthew (EXP)
I tried to do the following command;
Ldapdelete -D cn=Directory Manager -h server_name -p 389 
cn=nsuniqueid_random_set_of_numbers,cn=groups,cn=accounts,dc=domain,dc=ca
And I get the ldap_delete: no such object

Matt

-Original Message-
From: Rob Crittenden [mailto:rcrit...@redhat.com] 
Sent: Tuesday, April 14, 2015 2:32 PM
To: Joseph, Matthew (EXP); freeipa-users@redhat.com
Subject: Re: EXTERNAL: Re: [Freeipa-users] Can't delete group because it states 
it's not found

Joseph, Matthew (EXP) wrote:
 Hey Rob,
 
 So I did the following command;
 
 Ldapdelete -D cn=Directory Manager -h server_name -p 389 
 cn=group_name,cn=groups,cn=accounts,dc=domain,dc=ca and it comes back with 
 the following;
 Ldap_delete: No such object
 
 I also tried replacing the group_name with the nsuniqueid and still the same 
 results.

I'd need more details on what you did. You already know the group by
it's name doesn't exist otherwise IPA would have been able to delete it.

The point is to use the --all --raw flags to get the actual DN of the
group entry and delete that.

rob

 
 Matt
 
 -Original Message-
 From: Rob Crittenden [mailto:rcrit...@redhat.com] 
 Sent: Tuesday, April 14, 2015 12:01 PM
 To: Joseph, Matthew (EXP); freeipa-users@redhat.com
 Subject: EXTERNAL: Re: [Freeipa-users] Can't delete group because it states 
 it's not found
 
 Joseph, Matthew (EXP) wrote:
 Hello,

  

 I'm trying to delete a group in IdM but when I do a ipa group-del
 group it states the following;

 Ipa: ERROR: group: group not found

  

 I do an ipa group-find and it displays the group with the current memebers.

  

 I look in the WebgUI and I can see the group in there but it has no
 information. If I try to view the group or delete it from there it again
 states that the group is not found.

  

 Anyone see this before?
 
 Run ipa group-show --all --raw groupname and look at the dn value. It
 may be a replication conflict entry. You'd need to delete that manually
 using something like ldapdelete.
 
 rob
 


-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] EXTERNAL: Re: Can't delete group because it states it's not found

2015-04-14 Thread Rob Crittenden
Joseph, Matthew (EXP) wrote:
 I tried to do the following command;
 Ldapdelete -D cn=Directory Manager -h server_name -p 389 
 cn=nsuniqueid_random_set_of_numbers,cn=groups,cn=accounts,dc=domain,dc=ca
 And I get the ldap_delete: no such object

Maybe this will help:
https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Managing_Replication-Solving_Common_Replication_Conflicts.html

I can't see what you're seeing so it's hard to get more precise.

rob

 
 Matt
 
 -Original Message-
 From: Rob Crittenden [mailto:rcrit...@redhat.com] 
 Sent: Tuesday, April 14, 2015 2:32 PM
 To: Joseph, Matthew (EXP); freeipa-users@redhat.com
 Subject: Re: EXTERNAL: Re: [Freeipa-users] Can't delete group because it 
 states it's not found
 
 Joseph, Matthew (EXP) wrote:
 Hey Rob,

 So I did the following command;

 Ldapdelete -D cn=Directory Manager -h server_name -p 389 
 cn=group_name,cn=groups,cn=accounts,dc=domain,dc=ca and it comes back with 
 the following;
 Ldap_delete: No such object

 I also tried replacing the group_name with the nsuniqueid and still the same 
 results.
 
 I'd need more details on what you did. You already know the group by
 it's name doesn't exist otherwise IPA would have been able to delete it.
 
 The point is to use the --all --raw flags to get the actual DN of the
 group entry and delete that.
 
 rob
 

 Matt

 -Original Message-
 From: Rob Crittenden [mailto:rcrit...@redhat.com] 
 Sent: Tuesday, April 14, 2015 12:01 PM
 To: Joseph, Matthew (EXP); freeipa-users@redhat.com
 Subject: EXTERNAL: Re: [Freeipa-users] Can't delete group because it states 
 it's not found

 Joseph, Matthew (EXP) wrote:
 Hello,

  

 I'm trying to delete a group in IdM but when I do a ipa group-del
 group it states the following;

 Ipa: ERROR: group: group not found

  

 I do an ipa group-find and it displays the group with the current memebers.

  

 I look in the WebgUI and I can see the group in there but it has no
 information. If I try to view the group or delete it from there it again
 states that the group is not found.

  

 Anyone see this before?

 Run ipa group-show --all --raw groupname and look at the dn value. It
 may be a replication conflict entry. You'd need to delete that manually
 using something like ldapdelete.

 rob

 

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project